Approved changes feed: RSS · Atom

cpe:2.3:a:offl:online_fantasy_football_league:0.2.6:*:*:*:*:*:*:*

part: a version: 0.2.6 update: *

VendorOffl (2f23f0b8-ebd0-5d20-abb2-403c0f37f567)
ProductOnline Fantasy Football League (774c10d2-523d-5c02-95cf-35a28cf64760)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/aliga8or/ffl purl2cpe 2026-06-01 10:14:56.365232
pkg:sourceforge/ffl purl2cpe 2026-06-01 10:14:56.365234

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-2890 vulnerable 2026-06-08 04:50:32.488531 Details available
Multiple SQL injection vulnerabilities in Online Fantasy Football League (OFFL) 0.2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) fflteam_id parameter to teams.php, the (2) league_id parameter to leagues.php, and the (3) player_id parameter to players.php.
Published: 2008-06-27T18:00:00.000Z
Updated: 2024-08-07T09:21:34.268Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.