CVE-2017-15970

Critical

Published: 29/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

PHP CityPortal version 2.0 is vulnerable to SQL Injection via the nid parameter to index.php in a page=news action, or the cat parameter.

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to data leakage or modification.

It is recommended to upgrade to the latest version of PHP CityPortal and implement input validation and sanitization.

Original NVD description (English source)

PHP CityPortal 2.0 allows SQL Injection via the nid parameter to index.php in a page=news action, or the cat parameter.