The host is running F3Site and is prone to multiple local file include Vulnerabilities.

Successful exploitation could allow remote attackers to obtain sensitive information or execute arbitrary code on the vulnerable Web Server. Impact Level: Application.

Upgrade to F3Site 2010 or later, For updates refer to http://dhost.info/compmaster/index.php

The flaw is due to error in 'mod/poll.php' and 'mod/new.php' which are not properly sanitising user supplied input data via 'GLOBALS[nlang]' parameter.

F3Site 2009 and prior.

• http://www.exploit-db.com/exploits/10536
• http://xforce.iss.net/xforce/xfdb/54908

---

Updated on 2015-03-25