CVE-2009-4435 - Multiple directory traversal vulnerabilities in F3Site 2009 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the GLOBALS[nlang] parameter to (1) mod/poll.php and (2) mod/new.php

Back Back to CVE browser

MEDIUM

Multiple directory traversal vulnerabilities in F3Site 2009 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the GLOBALS[nlang] parameter to (1) mod/poll.php and (2) mod/new.php

Published Dec 28, 2009

6.8

MEDIUM

CVSS 2.0

EPSS 2.01%

Description

Multiple directory traversal vulnerabilities in F3Site 2009 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the GLOBALS[nlang] parameter to (1) mod/poll.php and (2) mod/new.php.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (4)

http://packetstormsecurity.org/0912-exploits/f3site2009-lfi.txt
x_refsource_MISCExploit
http://www.exploit-db.com/exploits/10536
exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/bid/37408
vdb-entryx_refsource_BIDExploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/54908
vdb-entryx_refsource_XF

Link	Providers	Tags
http://packetstormsecurity.org/0912-exploits/f3site2009-lfi.txt		x_refsource_MISCExploit
http://www.exploit-db.com/exploits/10536		exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/bid/37408		vdb-entryx_refsource_BIDExploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/54908		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 28, 2009

Updated Aug 7, 2024

Reserved Dec 28, 2009

Link CVE-2009-4435

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-4435

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-4435