3 matches found
VulnCheck KEV: CVE-2019-13396
FlightPath 4.x and 5.0-x allows directory traversal and Local File Inclusion through the forminclude parameter in an index.php?q=system-handle-form-submit POST request because of an includeonce in systemhandleformsubmit in modules/system/system.module...
CVE-2019-13396
FlightPath 4.x and 5.0-x allows directory traversal and Local File Inclusion through the forminclude parameter in an index.php?q=system-handle-form-submit POST request because of an includeonce in systemhandleformsubmit in modules/system/system.module...
PT-2019-13308
Name of the Vulnerable Software and Affected Versions FlightPath versions 4.x through 5.0-x Description The issue allows directory traversal and Local File Inclusion through the form include parameter in an "index.php?q=system-handle-form-submit" POST request. This is due to an include once in th...