arfis

automated Remote File Inclusion search

RFI (0.2): phpFFL – Fantasy Football League Manager September 14, 2007

Filed under: RFI — arfis @ 5:36 am

Project Name: phpFFL – Fantasy Football League Manager
Project Link: http://sourceforge.net/projects/phpffl/
Project DL: http://surfnet.dl.sourceforge.net/sourceforge/phpffl/phpffl_1_24.tar.gz
RFI Info:
File: tmp/phpffl_1_24.ta/phpffl/phpffl_webfiles/signup.php
Line: 2
Vuln Code: include($PHPFFL_FILE_ROOT.”program_files/config.php”);

File: tmp/phpffl_1_24.ta/phpffl/phpffl_webfiles/program_files/livedraft/livedraft.php
Line: 2
Vuln Code: require($PHPFFL_FILE_ROOT.”program_files/livedraft/sajax.php”);

File: tmp/phpffl_1_24.ta/phpffl/phpffl_webfiles/program_files/livedraft/admin.php
Line: 2
Vuln Code: require($PHPFFL_FILE_ROOT.”program_files/livedraft/sajax.php”);

(found with version 0.2 – 3560 projects processed so far)