high7.5Public exploit code
CVE-2010-0974
Multiple SQL injection vulnerabilities in PHPCityPortal allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) video_show.php, (2…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PhpCityPortal - Multiple Vulnerabilities2010-03-10 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in PHPCityPortal allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) video_show.php, (2) spotlight_detail.php, (3) real_estate_details.php, and (4) auto_details.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpcityportal | Phpcityportal | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.exploit-db.com/exploits/11678
- http://www.packetstormsecurity.com/1003-exploits/phpcityportal-sqlrfi.txt
- http://www.securityfocus.com/bid/38649
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56811
- http://www.exploit-db.com/exploits/11678
- http://www.packetstormsecurity.com/1003-exploits/phpcityportal-sqlrfi.txt
- http://www.securityfocus.com/bid/38649
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56811