medium6.8Public exploit code
CVE-2009-4435
Multiple directory traversal vulnerabilities in F3Site 2009 allow remote attackers to include and execute arbitrary local files via directory traversal sequenc…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- F3Site 2009 - '/mod/new.php?GLOBALS[nlang]' Traversal Local File Inclusion2009-12-18 · webapps · php · Verified
- F3Site 2009 - '/mod/poll.php?GLOBALS[nlang]' Traversal Local File Inclusion2009-12-18 · webapps · php · Verified
Impact
Multiple directory traversal vulnerabilities in F3Site 2009 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the GLOBALS[nlang] parameter to (1) mod/poll.php and (2) mod/new.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Compmaster.Prv.Pl | F3site | Version 2009 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.org/0912-exploits/f3site2009-lfi.txt
- http://www.exploit-db.com/exploits/10536
- http://www.securityfocus.com/bid/37408
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54908
- http://packetstormsecurity.org/0912-exploits/f3site2009-lfi.txt
- http://www.exploit-db.com/exploits/10536
- http://www.securityfocus.com/bid/37408
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54908