PHPFootball 1.6 - Remote Hash Disclosure

PHPFootball 1.6 - Remote Hash Disclosure \n"; exit; else $head .= "GET /$path/filter.php?dbtable=Accounts&dbfield=Password HTTP/1.1\r\n"; $head .= "Host: $host\r\n"; $head .= "Connection: close\r\n\r\n"; $fsock = fsockopen $host,80; fputs $fsock,$head; while !feof$fsock $cont .= fgets$fsock;...

PHPFootball <= 1.6 (filter.php) Remote Hash Disclosure Exploit

Exploit for unknown platform in category web applications ============================================================== PHPFootball \n"; exit; else $head .= "GET /$path/filter.php?dbtable=Accounts&dbfield=Password HTTP/1.1\r\n"; $head .= "Host: $host\r\n"; $head .= "Connection: close\r\n\r\n";...

PHPFootball 1.6 - Remote Hash Disclosure

\n"; exit; else $head .= "GET /$path/filter.php?dbtable=Accounts&dbfield=Password HTTP/1.1\r\n"; $head .= "Host: $host\r\n"; $head .= "Connection: close\r\n\r\n"; $fsock = fsockopen $host,80; fputs $fsock,$head; while !feof$fsock $cont .= fgets$fsock; fclose$fsock; if pregmatchall"/.+?/",$cont,$i...

Sql injection

SQL injection vulnerability in show.php in PHPFootball 1.6 allows remote attackers to execute arbitrary SQL commands via the dbtable parameter...

CVE-2008-3387

SQL injection vulnerability in show.php in PHPFootball 1.6 allows remote attackers to execute arbitrary SQL commands via the dbtable parameter...

CVE-2008-3387

The CVE-2008-3387 entry concerns a SQL injection in show.php of PHPFootball 1.6, enabling remote attackers to execute arbitrary SQL commands via the dbtable parameter. The NVD-derived CVSSv2 metrics indicate a base score of 7.5 (HIGH) with network attack vector, low attack complexity, and no auth...

CVE-2008-3387

SQL injection vulnerability in show.php in PHPFootball 1.6 allows remote attackers to execute arbitrary SQL commands via the dbtable parameter...

PHPFootball 'show.php' SQL注入漏洞

BUGTRAQ ID: 30296 CNCAN ID：CNCAN-2008072202 PHPFootball是一款基于PHP的WEB应用程序。 PHPFootball不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'show.php'脚本对用户提交给WEB参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 PHPFootball 1.6 目前没有解决方案提供： http://phpfootball.sourceforge.net/...

phpfootball-sql.txt

Viva IslaM Viva IslaM Remote SQL injection Vulnerability PHPFootball 1.6 show.php dbtable AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM && WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...

PHPFootball 1.6 (show.php) Remote SQL Injection Vulnerability

No description provided by source. Viva IslaM Viva IslaM Remote SQL injection Vulnerability PHPFootball 1.6 show.php dbtable AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM && WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...

PHPFootball 1.6 (show.php) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= PHPFootball 1.6 show.php Remote SQL Injection Vulnerability ============================================================= Viva IslaM Viva IslaM Remote SQL injection Vulnerabilit...

PHPFootball 1.6 - SQL Injection

Viva IslaM Viva IslaM Remote SQL injection Vulnerability PHPFootball 1.6 show.php dbtable AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM && WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...

PHPFootball 1.6 - SQL Injection

PHPFootball 1.6 - SQL Injection Viva IslaM Viva IslaM Remote SQL injection Vulnerability PHPFootball 1.6 show.php dbtable AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM && WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...

CVE-2007-0638

show.php in Vlad Alexa Mancini PHPFootball 1.6 allows remote attackers to obtain sensitive information database contents via a % percent character in the dbfieldv parameter...

EUVD-2007-0636

show.php in Vlad Alexa Mancini PHPFootball 1.6 allows remote attackers to obtain sensitive information database contents via a % percent character in the dbfieldv parameter...

CVE-2007-0638

The CVE affects Vlad Alexa Mancini PHPFootball 1.6: show.php exposes sensitive database contents when processing the dbfieldv parameter containing a % character. Root cause is improper handling of the % character in dbfieldv, enabling remote attackers to disclose data. Impact is information discl...

phpfootball16-disclose.txt

Title : PHPFootball 1.6 show.php Remote Database Disclosure Vulnerability Author : ajann Contact : : S.Page : http://phpfootball.sourceforge.net $$ : Free Dork : inurl:/phpfootball/ DBREAD--------------------------------------------------------- http://target/path//show.php VARIABLES Example:...

PHPFootball 1.6 (show.php) Remote Database Disclosure Vulnerability

No description provided by source. Title : PHPFootball 1.6 show.php Remote Database Disclosure Vulnerability Author : ajann Contact : : S.Page : http://phpfootball.sourceforge.net $$ : Free Dork : inurl:/phpfootball/ DBREAD---------------------------------------------------------...

PHPFootball 1.6 - Remote Database Disclosure

PHPFootball 1.6 - Remote Database Disclosure Title : PHPFootball 1.6 show.php Remote Database Disclosure Vulnerability Author : ajann Contact : : S.Page : http://phpfootball.sourceforge.net $$ : Free Dork : inurl:/phpfootball/ DBREAD---------------------------------------------------------...

PHPFootball 1.6 (show.php) Remote Database Disclosure Vulnerability

Exploit for unknown platform in category web applications =================================================================== PHPFootball 1.6 show.php Remote Database Disclosure Vulnerability =================================================================== Title : PHPFootball 1.6 show.php Remo...