CVE-2007-5097

The Online Fantasy Football League (OFFL) version 0.2.6 is susceptible to a PHP remote file inclusion vulnerability in the lib/classes/offl_nflteam.php file. This flaw allows remote attackers to execute arbitrary PHP code by providing a URL in the DOC_ROOT parameter. However, it is noted that a _...

CVE-2007-4809

Summary : OFFL 0.2.6 (Online Fantasy Football League) contains multiple PHP remote file inclusion vulnerabilities that allow an attacker to craft a URL via the DOC_ROOT parameter to include files (lib/functions.php or lib/header.php), resulting in arbitrary PHP code execution under the web server...