Freeway 1.4.1.171 - '/includes/modules/faqdesk/faqdesk_article_require.php?language' Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/30731/info Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal strings to view local files in the context of the...

Freeway 1.4.1.171 - '/templates/Freeway/boxes/card1.php?language' Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/30731/info Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal strings to view local files in the context of the...

Freeway 1.4.1.171 - '/templates/Freeway/boxes/whos_online.php?language' Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/30731/info Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal strings to view local files in the context of the...

Freeway 1.4.1.171 - '/english/account.php?language' Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/30731/info Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal strings to view local files in the context of the...

Freeway 1.4.1.171 - '/templates/Freeway/boxes/loginbox.php?language' Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/30731/info Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal strings to view local files in the context of the...

Freeway 1.4.1.171 - includesmodulesnewsdesknewsdesk_article_require.php?language Traversal Local File Inclusion

Freeway 1.4.1.171 - includesmodulesnewsdesknewsdeskarticlerequire.php?language Traversal Local File Inclusion source: https://www.securityfocus.com/bid/30731/info Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker...

Freeway 1.4.1.171 - '/includes/modules/newsdesk/newsdesk_article_require.php?language' Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/30731/info Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal strings to view local files in the context of the...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/searchlinks.php in Freeway before 1.4.2.197 allows remote attackers to inject arbitrary web script or HTML via the URL...

CVE-2008-3677

Directory traversal vulnerability in includes/eventsapplicationtop.php in Freeway before 1.4.2.197 allows remote attackers to include and execute arbitrary local files via unspecified vectors...

Directory traversal

Directory traversal vulnerability in includes/eventsapplicationtop.php in Freeway before 1.4.2.197 allows remote attackers to include and execute arbitrary local files via unspecified vectors...

CVE-2008-3678

CVE-2008-3678 is a cross-site scripting (XSS) vulnerability in Freeway prior to 1.4.2.197, specifically in admin/search_links.php. The flaw allows remote attackers to inject arbitrary web script or HTML via the URL, enabling script execution in the context of the affected user. The public referen...

CVE-2008-3677

Directory traversal vulnerability in includes/eventsapplicationtop.php in Freeway before 1.4.2.197 allows remote attackers to include and execute arbitrary local files via unspecified vectors...

CVE-2008-3678

Cross-site scripting XSS vulnerability in admin/searchlinks.php in Freeway before 1.4.2.197 allows remote attackers to inject arbitrary web script or HTML via the URL...

CVE-2008-3677

Summary (concrete details from documents): CVE-2008-3677 is a directory traversal vulnerability in Freeway prior to 1.4.2.197, affecting the includes/events_application_top.php file. The flaw allows remote attackers to include and execute arbitrary local files via unspecified vectors. The availab...

Freeway 1.4.1 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/30676/info Freeway is prone to multiple remote file-include and cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. Freeway 1.4.1.171 is affected; other versions may also be vulnerable. 1. Multiple Remote/Local...

Freeway 1.4.1 - Multiple Input Validation Vulnerabilities

Freeway 1.4.1 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/30676/info Freeway is prone to multiple remote file-include and cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. Freeway 1.4.1.171 is affected; other...