CVE-2009-4435

CVE-2009-4435: F3Site 2009 is vulnerable to multiple local file inclusion via the GLOBALS[nlang] parameter in mod/poll.php and mod/new.php, enabling remote attackers to include/execute arbitrary local files. The issue is a directory traversal flaw (LFI) in the affected PHP endpoints. Connected ad...