OSVDB ID: 37086

Title: phpFFL program_files/livedraft/admin.php PHPFFL_FILE_ROOT Parameter Remote File Inclusion

Info

Disclosure

Sep 14, 2007

Discovery

Unknown

Dates

Exploit

Sep 14, 2007

Solution

Unknown

Description

Unknown or Incomplete

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Public
Disclosure: Vendor Verified
OSVDB: Web Related

Solution

Unknown or Incomplete

Products

Unknown or Incomplete

References

CVE ID: 2007-4934 (see also: NVD)
Bugtraq ID: 25667
Secunia Advisory ID: 26812
ISS X-Force ID: 36606
Related OSVDB ID: 37085 39650 39651 39652 39653 39654 39655 39656 39657 39658 39659 39660 39661 39662 39663
Exploit Database: 4406
Milw0rm: 4406
VUPEN Advisory: ADV-2007-3176
Other Advisory URL: http://arfis.wordpress.com/2007/09/14/rfi-02-phpffl-fantasy-football-league-manager/
Vendor Specific News/Changelog Entry: http://sourceforge.net/forum/forum.php?forum_id=735906
http://sourceforge.net/project/shownotes.php?release_id=539716&group_id=137531

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/37086