CVE-2007-0638

EPSS 3.0%

show.php in Vlad Alexa Mancini PHPFootball 1.6 allows remote attackers to obtain sensitive information (database contents) via a % (percent) character in the dbfieldv parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/3226unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/33070 http://secunia.com/advisories/23962 https://exchange.xforce.ibmcloud.com/vulnerabilities/31976 https://www.exploit-db.com/exploits/3226 http://www.securityfocus.com/bid/22312 http://www.vupen.com/english/advisories/2007/0429