Описание
PHP remote file inclusion vulnerability in lib/classes/offl_nflteam.php in Online Fantasy Football League (OFFL) 0.2.6 allows remote attackers to execute arbitrary PHP code via a URL in the DOC_ROOT parameter. NOTE: this issue is disputed by CVE because a FILE test protects offl_nflteam.php against direct requests
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:online_fantasy_football_league:offl:0.2.6:*:*:*:*:*:*:*
EPSS
Процентиль: 73%
0.00786
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-94
CWE-94
Связанные уязвимости
CVSS3: 9.8
github
почти 4 года назад
** DISPUTED ** PHP remote file inclusion vulnerability in lib/classes/offl_nflteam.php in Online Fantasy Football League (OFFL) 0.2.6 allows remote attackers to execute arbitrary PHP code via a URL in the DOC_ROOT parameter. NOTE: this issue is disputed by CVE because a __FILE__ test protects offl_nflteam.php against direct requests.
EPSS
Процентиль: 73%
0.00786
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-94
CWE-94