CVE-2009-4435

no score yetEPSS 2.0%

Multiple directory traversal vulnerabilities in F3Site 2009 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the GLOBALS[nlang] parameter to (1) mod/poll.php and (2) mod/new.php.

EPSS: 2.0% chance of exploitation in the next 30 days; higher than 80% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2009-12-28
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

compmaster.prv.pl:f3site

References

http://packetstormsecurity.org/0912-exploits/f3site2009-lfi.txt
http://www.exploit-db.com/exploits/10536
http://www.securityfocus.com/bid/37408
https://exchange.xforce.ibmcloud.com/vulnerabilities/54908
http://packetstormsecurity.org/0912-exploits/f3site2009-lfi.txt

Check your stack JSON