Security Advisory
CVE-2007-0638
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
show.php in Vlad Alexa Mancini PHPFootball 1.6 allows remote attackers to obtain sensitive information (database contents) via a % (percent) character in the dbfieldv parameter.