ASP Football Pool 2.3 Remote Database Disclosure Vulnerability

No description provided by source. !/usr/bin/perl ASP Football Pool v2.3 Script : ASP Football Pool v2.3 Demo : http://brainjar.com/AspFootballPool/demo1 Download : http://www.brainjar.com/AspFootballPool/download/AspFootballPool2.3.zip .--"""""--. .' '. / \ ; C4TEAM ; | | | | ; ; ByALBAYX \ '--,...

CVE-2008-2890

Multiple SQL injection vulnerabilities in Online Fantasy Football League OFFL 0.2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 fflteamid parameter to teams.php, the 2 leagueid parameter to leagues.php, and the 3 playerid parameter to players.php...

Sql injection

Multiple SQL injection vulnerabilities in Online Fantasy Football League OFFL 0.2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 fflteamid parameter to teams.php, the 2 leagueid parameter to leagues.php, and the 3 playerid parameter to players.php...

CVE-2008-2890

Multiple SQL injection vulnerabilities in Online Fantasy Football League OFFL 0.2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 fflteamid parameter to teams.php, the 2 leagueid parameter to leagues.php, and the 3 playerid parameter to players.php...

CVE-2008-2890

CVE-2008-2890 corresponds to multiple SQL injection vulnerabilities in Online Fantasy Football League (OFFL) versions up to 0.2.6. The flaws allow remote attackers to inject arbitrary SQL via three parameters: fflteam_id (teams.php), league_id (leagues.php), and player_id (players.php). The core ...

Sql injection

SQL injection vulnerability in showpredictionsformatch.php in Prediction Football 1.x allows remote attackers to execute arbitrary SQL commands via the matchid parameter in a dupa action...

CVE-2008-1732

SQL injection vulnerability in showpredictionsformatch.php in Prediction Football 1.x allows remote attackers to execute arbitrary SQL commands via the matchid parameter in a dupa action...

CVE-2008-1732

SQL injection vulnerability in showpredictionsformatch.php in Prediction Football 1.x allows remote attackers to execute arbitrary SQL commands via the matchid parameter in a dupa action...

CVE-2008-1732

CVE-2008-1732 affects Prediction Football 1.x. A SQL injection exists in showpredictionsformatch.php via the matchid parameter in a dupa action, allowing remote attackers to execute arbitrary SQL commands. Exploitation details, patch/version info, and official remediation are not provided in the ...

Prediction Football 1.x (matchid) Remote SQL Injection Vulnerability

No description provided by source. / Prediction Football v 1.x Remote SQL INJECTION Discovered by 0in from Dark-Coders Programming & Security Group. !!!!!! http://dark-coders.4rh.eu !!!!!! Contact: 0indotemailatgmaildotcom Greetz to all Dark-Coders Group Members: DieAngel, Sun8hclf, M4r1usz,...

Prediction Football 1.x (matchid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Prediction Football 1.x matchid Remote SQL Injection Vulnerability ==================================================================== / Prediction Football v 1.x Remote...

Prediction Football 1.x - matchid SQL Injection

Prediction Football 1.x - matchid SQL Injection / Prediction Football v 1.x Remote SQL INJECTION Discovered by 0in from Dark-Coders Programming & Security Group. !!!!!! http://dark-coders.4rh.eu !!!!!! Contact: 0indotemailatgmaildotcom Greetz to all Dark-Coders Group Members: DieAngel, Sun8hclf,...

Prediction Football 1.x - 'matchid' SQL Injection

/ Prediction Football v 1.x Remote SQL INJECTION Discovered by 0in from Dark-Coders Programming & Security Group. !!!!!! http://dark-coders.4rh.eu !!!!!! Contact: 0indotemailatgmaildotcom Greetz to all Dark-Coders Group Members: DieAngel, Sun8hclf, M4r1usz, Djlinux, Aristo89 Script homepage:...

Remote file inclusion

PHP remote file inclusion vulnerability in lib/classes/offlnflteam.php in Online Fantasy Football League OFFL 0.2.6 allows remote attackers to execute arbitrary PHP code via a URL in the DOCROOT parameter. NOTE: this issue is disputed by CVE because a FILE test protects offlnflteam.php against...

CVE-2007-5097

PHP remote file inclusion vulnerability in lib/classes/offlnflteam.php in Online Fantasy Football League OFFL 0.2.6 allows remote attackers to execute arbitrary PHP code via a URL in the DOCROOT parameter. NOTE: this issue is disputed by CVE because a FILE test protects offlnflteam.php against...

CVE-2007-5097

PHP remote file inclusion vulnerability in lib/classes/offlnflteam.php in Online Fantasy Football League OFFL 0.2.6 allows remote attackers to execute arbitrary PHP code via a URL in the DOCROOT parameter. NOTE: this issue is disputed by CVE because a FILE test protects offlnflteam.php against...

Immunity Canvas: OFFL_INCLUDE

Name| offlinclude ---|--- CVE| CVE-2007-4809 Exploit Pack| CANVAS Description| Online Fantasy Football League 0.2.6 Remote file inclusion Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: Online Fantasy Football League CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4809 CVE...

CVE-2007-4809

Multiple PHP remote file inclusion vulnerabilities in Online Fantasy Football League OFFL 0.2.6 allow remote attackers to execute arbitrary PHP code via a URL in the DOCROOT parameter to 1 lib/functions.php or 2 lib/header.php...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Online Fantasy Football League OFFL 0.2.6 allow remote attackers to execute arbitrary PHP code via a URL in the DOCROOT parameter to 1 lib/functions.php or 2 lib/header.php...

CVE-2007-4809

Summary : OFFL 0.2.6 (Online Fantasy Football League) contains multiple PHP remote file inclusion vulnerabilities that allow an attacker to craft a URL via the DOC_ROOT parameter to include files (lib/functions.php or lib/header.php), resulting in arbitrary PHP code execution under the web server...