PHP CityPortal 2.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: PHP CityPortal 2.0 - SQL Injection Vendor Homepage: http://www.phpcityportal.com/ Software Link: http://www.phpcityportal.com/index.php Demo: http://phpcityportal.com/demo Version: 2.0 Category: Webapps Tested on:...

PHP CityPortal 2.0 - SQL Injection

Exploit Title: PHP CityPortal 2.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.phpcityportal.com/ Software Link: http://www.phpcityportal.com/index.php Demo: http://phpcityportal.com/demo Version: 2.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2017-15970...

PHP CityPortal 2.0 - SQL Injection

PHP CityPortal 2.0 - SQL Injection Exploit Title: PHP CityPortal 2.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.phpcityportal.com/ Software Link: http://www.phpcityportal.com/index.php Demo: http://phpcityportal.com/demo Version: 2.0 Category: Webapps Tested on:...

CVE-2017-15970

PHP CityPortal 2.0 is vulnerable to SQL Injection through the nid parameter in index.php (page=news action) or the cat parameter. The issue is documented across multiple sources (NVD entry CVE-2017-15970, CNVD/CNVD-2017-35824, Exploit-DB/0day entries, etc.). Public proof-of-concept and exploit in...