Phpffl

Php floatModified

This vulnerability has been modified since it was last analyzed by the NVD. It is awaiting reanalysis which may result in further changes to the information provided.

I only stumbled upon this open source league management system today. Looks like it is still being developed in that the scoring categories arent as complete as others, but you cant beat the price of free. It includes live scoring (or close to it) and most of the basic features one would need to. I am aware of phpFFL, which purports to be open source fantasy football league software—but development seems to have stalled. (It also looks like they are screen scraping CBS Sports for statistics, which I really want to avoid.) Plus, I vowed a long time ago never to take up another serious project in PHP again. I value my mental health too.

Current Description

Multiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to execute arbitrary PHP code via a URL in the PHPFFL_FILE_ROOT parameter to (1) admin.php, (2) custom_pages.php, (3) draft.php, (4) faq.php, (5) leagues.php, (6) livedraft.php, (7) login.php, (8) my_team.php, (9) profile.php, (10) signup.php, (11) statistics.php, (12) transactions.php, (13) program_files/admin/custom_pages.php, or (14) program_files/common.php. NOTE: the program_files/livedraft/admin.php and program_files/livedraft/livedraft.php vectors are covered by CVE-2007-4934.


Analysis Description

Multiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to execute arbitrary PHP code via a URL in the PHPFFL_FILE_ROOT parameter to (1) admin.php, (2) custom_pages.php, (3) draft.php, (4) faq.php, (5) leagues.php, (6) livedraft.php, (7) login.php, (8) my_team.php, (9) profile.php, (10) signup.php, (11) statistics.php, (12) transactions.php, (13) program_files/admin/custom_pages.php, or (14) program_files/common.php. NOTE: the program_files/livedraft/admin.php and program_files/livedraft/livedraft.php vectors are covered by CVE-2007-4934.

Severity

CVSS 3.x Severity and Metrics:
NIST:NVD

Phpmyadmin

NVD score not yet provided.

NVD Analysts use publicly available information to associate vector strings and CVSS scores. We also display any CVSS information provided within the CVE List from the CNA.
Note: NVD Analysts have not published a CVSS score for this CVE at this time. NVD Analysts use publicly available information at the time of analysis to associate CVSS vector strings.
CVSS 2.0 Severity and Metrics:
NIST:NVD
Vector:HyperlinkResourcehttp://arfis.wordpress.com/2007/09/14/rfi-02-phpffl-fantasy-football-league-manager/http://sourceforge.net/forum/forum.php?forum_id=735906http://sourceforge.net/project/shownotes.php?release_id=539716&group_id=137531http://www.vupen.com/english/advisories/2007/3176

Weakness Enumeration

CWE-IDCWE NameSource
CWE-94Improper Control of Generation of Code ('Code Injection')NIST

Known Affected Software Configurations Switch to CPE 2.2

Denotes Vulnerable Software
Are we missing a CPE here? Please let us know.

Change History

1 change records found show changes
  • Advertisement

  • Football live streams v.1.0Watch Livefootball Sports TV on your pc. live footy streams on your desktop.Watch your favorite team playing in the lates game: Soccer, Football, Baseball, Boxing, Cricket, Golf, NBA, Basketbal, Hockey, Snooker, Tennis, WWE Streams updated daily ...
  • WatchFootball v.2.0Watch LiveFootball Online On Your Pc, watch livefootball premiership soccer streams your on pc including UEFA Cup, Scottish Premier League, French Ligue 1, German Bundesliga, Italian Serie A, Spanish La Liga, Carling Cup, FA Cup, Euro 2008.
  • SportPlayer v.2014SportPlayer is a smart program for users who want to watch sport events on their computer. It uses a slightly new angle to offer live streaming of sport events. It aims to combine multiple streaming programs in its interface.
  • PPRecorder v.1.72record P2P TV streaming media(livefootball and other Live TV) to your PC ...
  • FanDraft Fantasy Football Draft v.8FanDraft Fantasy Football Draft Software, is the first ever Digital Fantasy Football Draft Board! A multimedia program designed to assist and enhance fantasy football leagues with their live drafts. Make your draft feel like an actual NFL Draft.
  • Bright Live Media Series Package v.1.4Watch 4000 Live TV stations from your computer. Not required of a TV tuner or decoder. 100% legal - no subscription needed. Connect to TV shows live from home. All you need is our Internet TV product, your PC, and Internet connection. Thousands of tv ...
  • Live Cricket Streaming v.9.20Live Cricket Streaming software ensures viewing of matches, highlights, and past games all from your computer. Watch domestic or international teams from home or on the go with the Live Cricket Streaming software program.
  • GridironBoss Fantasy Football Engine v.1.0GridironBoss is a full-featured fantasy football (US) web engine.To view a live instance, please see http://www.priestas.net/GridironBoss/ ...
  • PhpFFL - Fantasy Football League Manager v.1.70phpFFL is a free and fully customizable online Fantasy Football League Manager with a live(ajax) draft module.
  • FanDraft Football Demo v.9.17FanDraft Fantasy Football Draft Software, is the first ever Digital Fantasy Football Draft Board!
  • Softscanner LIVE v.4.0 FullDownload Softscanner now to hear POLICE, FIRE, 911, ATC & more LIVE! Includes ACARS Flight data decoder - no radio equipment needed!
  • Live Chat v.3.2.0miOOt is a visitor tracking and live chat tool, It captures the visitor’s info on a real time basis and provides opportunity to initiate a communication channel with the visitor to your web site.
  • Football Mah Jong v.6Play Online Football Games online football games at Planters. Try the quarterback football game Shootout. Check your scores on our World Cup Fantasy Football game and win a Mini Cooper. Online soccer manager game. Ow ...
  • Football Roster Organizer v.1.0Football Roster Assistant is a free software program designed for football coaches of kid's football teams like Pee Wee football, Pop Warner, or city leagues. The main goal of the program is to allow the coach to plan rosters prior to the game.
  • Skymol Communicator Live Chat Software v.2.0Live help software with voice,video, live help and live customer support software. On-demand customer service software, help desk software for online sales and customer service. Included voice mail and video mail. Completely web-based, no downloads.
  • Skymol Live Customer Support Software v.1.0Customer support software with voice chat, video chat. Completely web-based live help software for live customer service on your web site. It has a lot of unique features e.g. real time voice, video communication, voicemail, videomail, call recording ...
  • Live TV On PC v.2.1Live TV On PC. Do you want to watch live tv on your pc? Our live tv on pc software comes packaged with more than 3000 satellite tv channels you can watch for free. All it cost is a one time cost of $49.95.
  • 3D Live Snooker v.2.723D Live Snooker simulates snooker on your computer with full 3-D environment and perfect 3d sound. It features easy and addictive game play, supports short snooker(10 reds) and full snooker(15 reds) games. The balls roll just like real ones.
  • StatTrak for Football v.2.1StatTrak for Football software is a complete stats program with many options yet very easy to use. Track and calculate over 100 stats for Passing, Receiving, Rushing, Defense, Kicking, game scores, won/lost record, team standings and more.
  • Watch Live TV On PC v.2.1Watch Live TV On PC. want to watch free satellite tv on your PC? You can, by downloading our watch live tv on pc software 2.1. For a small one time cost of $49.95, you can watch over 3000 satellite tv channels on your PC for free.

Phpffl Forum

Phpffl
Live Football software by TitlePopularityFreewareLinuxMac

Php Flag

Today's Top Ten Downloads for Live Football
  • Website Live Chat Software Live chat service provides live chat support, visitor
  • Velaro Live Help The trusted leader in live help and live chat. Velaro
  • Live Cricket Streaming Live Cricket Streaming software ensures viewing of
  • Live TV online, free Watch Live TV online, free Software with 1000's Streaming
  • Live Support Chat Software Online support chat software is developed purely in ASP
  • Multiuser Live Chat Software Web based chat customer support utility provides support to
  • The Live TV Software Watch real live TV online on your PC, with just an
  • Live TV On PC Live TV On PC. Do you want to watch live tv on your pc?
  • Watch Live TV On PC Watch Live TV On PC. want to watch free satellite tv on
  • 3D Live Snooker 3D Live Snooker simulates snooker on your computer with

Php Fflush

Visit [email protected] for more of the top downloads here at WinSite!