A vulnerability was found in Online Fantasy Football League OFFL 0.2.3/0.2.6 and classified as critical. This issue affects some unknown processing in the library lib/functions.php of the file lib/header.php. The manipulation of the argument DOC_ROOT leads to code injection.

The identification of this vulnerability is CVE-2007-4809. The attack may be initiated remotely. Furthermore, there is an exploit available.