CVE-2009-0711

no score yetEPSS 1.2%

filter.php in PHPFootball 1.6 and earlier allows remote attackers to retrieve password hashes via a request with an Accounts value for the dbtable parameter, in conjunction with a Password value for the dbfield parameter. NOTE: this has been reported as a SQL injection vulnerability by some sources, but the provenance of that information is unknown.

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2009-02-23
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

vlad_alexa_mancini:phpfootball

References

http://secunia.com/advisories/33367
http://www.osvdb.org/51102
https://www.exploit-db.com/exploits/7636
http://secunia.com/advisories/33367
http://www.osvdb.org/51102

Check your stack JSON