CVE-2009-0515: Directory traversal vulnerability in check_lang.php in Yet Another NOCC (YANOCC) 0.1.0 and earlier allows r...

Security readout for executives and security teams

CVE-2009-0515 affects Yet Another NOCC (YANOCC) 0.1.0 and earlier. A remote attacker can abuse language selection to make the app load local files outside intended directories. If exposed, this can disclose sensitive files or execute included local PHP content. Sources do not provide CVSS, vendor patch details, or confirmed active exploitation. Exposure is likely limited to organizations still running legacy YANOCC 0.1.0 or earlier, especially internet-facing webmail deployments. Modern environments are unlikely to be affected unless old code remains deployed, bundled, or externally reachable. Prioritize if any legacy YANOCC instance is internet-facing or handles email. The affected software is old and likely uncommon, but the vulnerability class can expose sensitive files or execute local code when reachable. Mitigation focus: Identify and retire YANOCC 0.1.0 or earlier deployments.; Check vendor or maintainer guidance before applying any product-specific fix.; Restrict external access to any legacy YANOCC instance pending remediation..

Prepared

Jun 28, 2026, 11:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.