CVE-2017-17640

The CVE-2017-17640 entry concerns Advanced World Database 2.0.5, which is vulnerable to SQL Injection via the city.php and state.php parameters (country and state inputs). Multiple connected sources (CNVD-2017-37430, NVD entries) describe a remote injection path that can affect database queries t...

PT-2017-14936

Name of the Vulnerable Software and Affected Versions Advanced World Database version 2.0.5 Description The issue concerns SQL Injection via specific parameters in certain PHP files. The country or state parameter in the "city.php" file and the country parameter in the "state.php" file are...

CVE-2017-17640: Improper Neutralization of Special Elements used in an SQL Command

Advanced World Database 2.0.5 has SQL Injection via the city.php country or state parameter, or the state.php country parameter...

kcmusa.org XSS vulnerability

Vulnerable URL: http://www.kcmusa.org/board/state.php?nation=1"...

PT-2015-6419

Name of the Vulnerable Software and Affected Versions ISPConfig versions prior to 3.0.5.4p7 Description The issue allows remote authenticated users with monitor permissions to execute arbitrary SQL commands via the server parameter in the "monitor/show sys state.php" file. This can potentially be...

PT-2015-6420

Name of the Vulnerable Software and Affected Versions ISPConfig versions prior to 3.0.5.4p7 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication of administrators for requests that create...