VulnerabilityModified
CVE-2009-4435
Multiple directory traversal vulnerabilities in F3Site 2009 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the GLOBALS[nlang] parameter to (1) mod/poll.php and (2) mod/new.php.
MEDIUM 6.8EPSS 2.01%
Does this matter?
Lower severity and a low EPSS score (2.01%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple directory traversal vulnerabilities in F3Site 2009 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the GLOBALS[nlang] parameter to (1) mod/poll.php and (2) mod/new.php.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 2.01% probability · 80th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- compmaster.prv.pl/f3site
- Source
- cve@mitre.org
References
- http://packetstormsecurity.org/0912-exploits/f3site2009-lfi.txtExploit
- http://www.exploit-db.com/exploits/10536Exploit
- http://www.securityfocus.com/bid/37408Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54908
- http://packetstormsecurity.org/0912-exploits/f3site2009-lfi.txtExploit
- http://www.exploit-db.com/exploits/10536Exploit
- http://www.securityfocus.com/bid/37408Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54908
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.