CVE-2009-4435

CVE-2009-4435 describes multiple directory traversal vulnerabilities in F3Site 2009, specifically affecting the mod/poll.php and mod/new.php components. An attacker could exploit these flaws by manipulating the GLOBALS[nlang] parameter to include and execute arbitrary local files on the server. This vulnerability carries a CVSS score of 6.8 (Medium), indicating a network-based attack with medium complexity, potentially leading to partial compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation in the wild or inclusion in CISA's KEV catalog, public exploit code exists on ExploitDB, and the vulnerability has received minimal community discussion or media coverage.