CVE-2009-4544

The provided text describes multiple input-validation vulnerabilities in Facil Helpdesk, including XSS and file inclusion flaws, but does not contain functional exploit code. It references a proof-of-concept URL for XSS.

This exploit demonstrates multiple vulnerabilities in Facil Helpdesk, including XSS, LFI, and RFI. The PoC provides specific URLs to exploit these vulnerabilities, particularly targeting the 'lng' parameter in index.php and the path in kbase.php.