CVE-2017-17620

Critical

Published: 13/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Lawyer Search Script version 1.1 has a SQL Injection vulnerability via the city parameter in the /lawyer-list endpoint.

Exploitation of this vulnerability may lead to unauthorized access to the database, jeopardizing data integrity and confidentiality.

It is recommended to validate and sanitize input data and to update the script to the latest version to eliminate this vulnerability.

Original NVD description (English source)

Lawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter.