CVE-2009-4435: Compmaster.prv.pl f3site

Medium severity, CVSS 6.8. EPSS: 2% chance of exploitation in the next 30 days.

Multiple directory traversal vulnerabilities in F3Site 2009 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the GLOBALS[nlang] parameter to (1) mod/poll.php and (2) mod/new.php.

Affected products

• Compmaster.prv.pl f3site: version 2009 only

Published 2009-12-28. Last modified 2026-06-16.