CVE:CVE-2009-4870
CNNVD:CNNVD-201005-143
PHPCityPortal的login.php存在多个SQL注入漏洞，远程攻击者可以通过(1)req_username(即 Username)参数，和(2)req_password(即 Password)参数执行任意SQL命令。
solution:Upgrade phpcityportal phpcityportal to a higher version than *