CVE-2007-4809

published 2007-09-11

CVE-2007-4809: Multiple PHP remote file inclusion vulnerabilities in Online Fantasy Football League (OFFL) 0.2.6 allow remote attackers to execute arbitrary PHP code via a…

Priority P3 54 high 7.5 CVSS 2.0

AV N AC L Au N C P I P A P

EXPLOIT

Multiple PHP remote file inclusion vulnerabilities in Online Fantasy Football League (OFFL) 0.2.6 allow remote attackers to execute arbitrary PHP code via a URL in the DOC_ROOT parameter to (1) lib/functions.php or (2) lib/header.php.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
online_fantasy_football_league	offl	—	—
online_fantasy_football_league	offl	—	—

Detection & IOCs extracted from sources · hover to see the quote

path /lib/functions.php↗

path /lib/header.php↗

• → Monitor HTTP requests targeting lib/functions.php or lib/header.php with a user-supplied DOC_ROOT parameter containing a URL (http:// or ftp://), indicating a remote file inclusion attempt. ↗
• → Alert on GET/POST requests where the DOC_ROOT query parameter value begins with http://, https://, or ftp:// against OFFL application paths. ↗

• · The RFI vulnerability is only exploitable if PHP's allow_url_include (and allow_url_fopen) directives are enabled on the target server, as the attack relies on PHP including a remote URL supplied via DOC_ROOT. ↗

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-94