CVE:CVE-2008-2890
CNNVD:CNNVD-200806-389
Online Fantasy Football League (OFFL) 0.2.6及其早期版本存在多个SQL注入漏洞，远程攻击者通过(1) 对teams.php的fflteam_id参数 ,  (2)对leagues.php的 league_id参数, 以及(3) 对players.php的player_id 参数，以执行任意SQL命令。
solution:Upgrade offl online_fantasy_football_league to a higher version than 0.2.6,and avoid the version 0.2.6