F3Site 2009 - '/mod/poll.php?GLOBALS[nlang]' Traversal Local File Inclusion
| EKU-ID: 38261 | CVE: CVE-2009-4435;OSVDB-61410 | OSVDB-ID: |
| Author: cr4wl3r | Published: 2009-12-18 | Verified:
 |
| Download: | ||
Rating☆☆☆☆☆ |
| EKU-ID: 38261 | CVE: CVE-2009-4435;OSVDB-61410 | OSVDB-ID: |
| Author: cr4wl3r | Published: 2009-12-18 | Verified:
|
| Download: | ||
Rating☆☆☆☆☆ |
source: https://www.securityfocus.com/bid/37408/info F3Site is prone to multiple local file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible. F3Site 2009 is vulnerable; other versions may also be affected. http://www.example.com/mod/poll.php?GLOBALS[nlang]=[LFI%00]