CVE-2009-0711 | BDVDB-2026-35144 Detail

Description#

filter.php in PHPFootball 1.6 and earlier allows remote attackers to retrieve password hashes via a request with an Accounts value for the dbtable parameter, in conjunction with a Password value for the dbfield parameter. NOTE: this has been reported as a SQL injection vulnerability by some sources, but the provenance of that information is unknown.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12009-02-23Record published in the CVE List.
2. Version 22024-08-07Most recent update recorded in the CVE List.