CVE-2007-5097

The Online Fantasy Football League (OFFL) version 0.2.6 is susceptible to a PHP remote file inclusion vulnerability in the lib/classes/offl_nflteam.php file. This flaw allows remote attackers to execute arbitrary PHP code by providing a URL in the DOC_ROOT parameter. However, it is noted that a _...