CVE-2007-4809

Multiple PHP remote file inclusion vulnerabilities in Online Fantasy Football League (OFFL) 0.2.6 allow remote attackers to execute arbitrary PHP code via a…

published September 11, 2007

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.1th percentile for exploit probability.

CVSS

—

EPSS

56%

Percentile

99.1

In the wild

Unconfirmed

What it is

Multiple PHP remote file inclusion vulnerabilities in Online Fantasy Football League (OFFL) 0.2.6 allow remote attackers to execute arbitrary PHP code via a URL in the DOC_ROOT parameter to (1) lib/functions.php or (2) lib/header.php.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.56351 · 99.1th percentile
Published: 2007-09-11T18:00Z

EPSS history

Timeline

11 SEP 18:00Z
Multiple PHP remote file inclusion vulnerabilities in Online Fantasy Football League (OFFL) 0.2.6 allow remote attackers to execute arbitrary PHP code via a…
cvelistv5