CVE-2009-4626: Phpnagios

High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days.

Directory traversal vulnerability in menu.php in phpNagios 1.2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the conf[lang] parameter.

Affected products

• Phpnagios Phpnagios: version 1.2.0 only

Published 2010-01-18. Last modified 2026-06-16.