Vulnerability Database

296,349

Total vulnerabilities in the database

CVE-2007-4809

Multiple PHP remote file inclusion vulnerabilities in Online Fantasy Football League (OFFL) 0.2.6 allow remote attackers to execute arbitrary PHP code via a URL in the DOC_ROOT parameter to (1) lib/functions.php or (2) lib/header.php.

Published: Sep 11, 2007
Updated: Apr 13, 2023
CVE: CVE-2007-4809
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

CWE-94

Affected Software
References

Software	From	Fixed in
online_fantasy_football_league / offl	0.2.3	0.2.3.x
online_fantasy_football_league / offl	0.2.6	0.2.6.x

http://osvdb.org/36943
http://osvdb.org/36944
http://secunia.com/advisories/26767
http://www.securityfocus.com/bid/25596
https://exchange.xforce.ibmcloud.com/vulnerabilities/36529
https://www.exploit-db.com/exploits/4374

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo