CVE-2017-17640

Critical

Published: 13/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Advanced World Database version 2.0.5 has an SQL Injection vulnerability via the country or state parameter in city.php and the country parameter in state.php.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the database, threatening the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to upgrade to the latest version of the software and implement input filtering and validation to minimize the risk of SQL Injection attacks.

Original NVD description (English source)

Advanced World Database 2.0.5 has SQL Injection via the city.php country or state parameter, or the state.php country parameter.