CVE

Id
33007  
CVE No.
CVE-2008-2890  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in Online Fantasy Football League (OFFL) 0.2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) fflteam_id parameter to teams.php, the (2) league_id parameter to leagues.php, and the (3) player_id parameter to players.php.  
Phase
Assigned (20080627)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
358307 33007 CVE-2008-2890 MILW0RM:5889  View
358308 33007 CVE-2008-2890 URL:http://milw0rm.com/exploits/5889  View
358309 33007 CVE-2008-2890 BID:29861  View
358310 33007 CVE-2008-2890 URL:http://www.securityfocus.com/bid/29861  View
358311 33007 CVE-2008-2890 SECUNIA:30795  View
358312 33007 CVE-2008-2890 URL:http://secunia.com/advisories/30795  View
358313 33007 CVE-2008-2890 SREASON:3960  View
358314 33007 CVE-2008-2890 URL:http://securityreason.com/securityalert/3960  View
358315 33007 CVE-2008-2890 XF:offl-teams-sql-injection(43259)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49277 JVNDB-2008-004587 NCH Software Classic FTP の FTP クライアントにおけるディレクトリトラバーサルの脆弱性 Windows 用の NCH Software Classic FTP の FTP クライアントには、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2008-2894 33007 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004587.html  View