← back
CVE-2009-0711

CVE-2009-0711

EPSS 1.2%
filter.php in PHPFootball 1.6 and earlier allows remote attackers to retrieve password hashes via a request with an Accounts value for the dbtable parameter, in conjunction with a Password value for the dbfield parameter. NOTE: this has been reported as a SQL injection vulnerability by some sources, but the provenance of that information is unknown.
Affected products
n/a · n/a
public PoCs found — 1
cve_referencewww.exploit-db.com/exploits/7636unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/33367https://www.exploit-db.com/exploits/7636http://www.osvdb.org/51102