Phpcityportal

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Phpcityportal records in CISA KEV

No Phpcityportal vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Phpcityportal 5 records MEDIUM

Records

5 records

TI-2017-11700 CVE-2017-15970 · GHSA-gw3c-fgq2-g559

PHP CityPortal 2.0 allows SQL Injection via the nid parameter to index.php in a page=news action, or the cat parameter.

MEDIUM 46

PHP CityPortal 2.0 allows SQL Injection via the nid parameter to index.php in a page=news action, or the cat parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02204 Published 2017-10-29 No fix listed CWE-89

TI-2010-00936 CVE-2010-0975 · GHSA-wfgf-2q6h-cjmv

PHP remote file inclusion vulnerability in external.php in PHPCityPortal allows remote…

LOW 38

PHP remote file inclusion vulnerability in external.php in PHPCityPortal allows remote attackers to execute arbitrary PHP code via a URL in the url parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0299 Published 2010-03-16 No fix listed CWE-94

TI-2010-00935 CVE-2010-0974 · GHSA-53h3-xcm7-m7rc

Multiple SQL injection vulnerabilities in PHPCityPortal allow remote attackers to execute…

LOW 35

Multiple SQL injection vulnerabilities in PHPCityPortal allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) video_show.php, (2) spotlight_detail.php, (3) real_estate_details.php, and (4)…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00967 Published 2010-03-16 No fix listed CWE-89

TI-2009-04626 CVE-2009-4870 · GHSA-qfpj-2m5v-p9gc

Multiple SQL injection vulnerabilities in login.php in PHPCityPortal allow remote…

LOW 35

Multiple SQL injection vulnerabilities in login.php in PHPCityPortal allow remote attackers to execute arbitrary SQL commands via the (1) req_username (aka Username) and (2) req_password (aka Password) parameters.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00928 Published 2010-05-10 No fix listed CWE-89

TI-2010-02225 CVE-2010-2318 · GHSA-w55q-j649-2xh9

Cross-site scripting (XSS) vulnerability in cms_data.php in PHPCityPortal 1.3 allows…

LOW 22

Cross-site scripting (XSS) vulnerability in cms_data.php in PHPCityPortal 1.3 allows remote attackers to inject arbitrary web script or HTML via the page parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00893 Published 2010-06-17 No fix listed CWE-79

Open these records in search →

Critical	1
High	3
Medium	1
Low	0
No CVSS	0