CVE-2017-17640 Advanced World Database 2.0.5 has SQL Injection via the city.php country or state parameter, or the state.php country parameter.
CriticalCVSS 9.8
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Advanced World Database 2.0.5 has SQL Injection via the city.php country or state parameter, or the state.php country parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| advanced world database project advanced world database | = 2.0.5 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 43311 exploit third-party-advisory vdb-entry