CVE-2009-4435

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.01%

Published

Dec 28, 2009

Modified

Apr 22, 2026

Public PoC / Exploit (3)

All weaponized →

Exploit-DBF3Site 2009 - '/mod/new.php?GLOBALS[nlang]' Traversal Local File Inclusion Exploit-DBF3Site 2009 - '/mod/poll.php?GLOBALS[nlang]' Traversal Local File Inclusion TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple directory traversal vulnerabilities in F3Site 2009 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the GLOBALS[nlang] parameter to (1) mod/poll.php and (2) mod/new.php.

Weaknesses (CWE)

CWE-22

Affected Products (1)

compmaster.prv.pl · f3sitevulnerable

References (8)

http://packetstormsecurity.org/0912-exploits/f3site2009-lfi.txt

Exploit

http://www.exploit-db.com/exploits/10536

Exploit

http://www.securityfocus.com/bid/37408

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/54908

http://packetstormsecurity.org/0912-exploits/f3site2009-lfi.txt

Exploit

http://www.exploit-db.com/exploits/10536

Exploit

KEV Catalog EPSS Scores Vendors All CVEs