CVE Database
/

CVE-2007-4809

Back to search

CVE-2007-4809

Published: Sep 11, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple PHP remote file inclusion vulnerabilities in Online Fantasy Football League (OFFL) 0.2.6 allow remote attackers to execute arbitrary PHP code via a URL in the DOC_ROOT parameter to (1) lib/functions.php or (2) lib/header.php.

VendorProductVersions

n/a

n/a

affected
n/a

References

36944
vdb-entry
x_refsource_OSVDB
25596
vdb-entry
x_refsource_BID
26767
third-party-advisory
x_refsource_SECUNIA
offl-docroot-file-include(36529)
vdb-entry
x_refsource_XF
4374
exploit
x_refsource_EXPLOIT-DB
36943
vdb-entry
x_refsource_OSVDB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now