CVE-2009-4435 in F3Siteinfo

Summary

Multiple directory traversal vulnerabilities in F3Site 2009 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the GLOBALS[nlang] parameter to (1) mod/poll.php and (2) mod/new.php.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

12/28/2009

Disclosure

12/28/2009

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

Sources

Do you need the next level of professionalism?

Upgrade your account now!