OSVDB ID: 39651

Title: phpFFL custom_pages.php PHPFFL_FILE_ROOT Parameter Remote File Inclusion

Info

Disclosure

Sep 14, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Solution Unknown
Exploit: Exploit Unknown
Disclosure: Vendor Verified, Uncoordinated Disclosure
OSVDB: Web Related

Solution

Products

Unknown or Incomplete

References

CVE ID: 2007-4935 (see also: NVD)
Secunia Advisory ID: 26812
Related OSVDB ID: 37085 37086 39650 39652 39653 39654 39655 39656 39657 39658 39659 39660 39661 39662 39663
VUPEN Advisory: ADV-2007-3176
Other Advisory URL: http://arfis.wordpress.com/2007/09/14/rfi-02-phpffl-fantasy-football-league-manager/
Vendor Specific News/Changelog Entry: http://sourceforge.net/forum/forum.php?forum_id=735906
http://sourceforge.net/project/shownotes.php?release_id=539716&group_id=137531

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/39651