85 matches found
Freeway 1.4.1.171 - includesmodulesfaqdeskfaqdesk_article_require.php?language Traversal Local File Inclusion
Freeway 1.4.1.171 - includesmodulesfaqdeskfaqdeskarticlerequire.php?language Traversal Local File Inclusion source: https://www.securityfocus.com/bid/30731/info Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker c...
Freeway 1.4.1.171 - templatesFreewayboxescard1.php?language Traversal Local File Inclusion
Freeway 1.4.1.171 - templatesFreewayboxescard1.php?language Traversal Local File Inclusion source: https://www.securityfocus.com/bid/30731/info Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these...
Freeway 1.4.1.171 - englishaccount.php?language Traversal Local File Inclusion
Freeway 1.4.1.171 - englishaccount.php?language Traversal Local File Inclusion source: https://www.securityfocus.com/bid/30731/info Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these...
[DSECRG-08-036] Multiple Security Vulnerabilities in Freeway eCommerce 1.4.1.171
Digital Security Research Group DSecRG Advisory DSECRG-08-036 Application: Freeway eCommerce Versions Affected: 1.4.1.171 Vendor URL: http://www.openfreeway.org/ Bugs: RFI, Multiple LFI, XSS Exploits: YES Reported: 27.06.2008 Second report: 04.07.2008 Vendor response: 06.07.2008 Solution: YES Dat...
Freeway 1.4.1.171 - '/templates/Freeway/mainpage_modules/mainpage.php?language' Traversal Local File Inclusion
source: https://www.securityfocus.com/bid/30731/info Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal strings to view local files in the context of the...
Freeway 1.4.1.171 - '/french/account_newsletters.php?language' Traversal Local File Inclusion
source: https://www.securityfocus.com/bid/30731/info Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal strings to view local files in the context of the...
Freeway 1.4.1.171 - templatesFreewayboxeswhos_online.php?language Traversal Local File Inclusion
Freeway 1.4.1.171 - templatesFreewayboxeswhosonline.php?language Traversal Local File Inclusion source: https://www.securityfocus.com/bid/30731/info Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit...
Freeway 1.4.1.171 - '/templates/Freeway/boxes/card1.php?language' Traversal Local File Inclusion
source: https://www.securityfocus.com/bid/30731/info Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal strings to view local files in the context of the...
Freeway 1.4.1.171 - '/english/account.php?language' Traversal Local File Inclusion
source: https://www.securityfocus.com/bid/30731/info Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal strings to view local files in the context of the...
Freeway 1.4.1.171 - '/templates/Freeway/boxes/whos_online.php?language' Traversal Local File Inclusion
source: https://www.securityfocus.com/bid/30731/info Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal strings to view local files in the context of the...
Freeway 1.4.1.171 - '/includes/modules/faqdesk/faqdesk_article_require.php?language' Traversal Local File Inclusion
source: https://www.securityfocus.com/bid/30731/info Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal strings to view local files in the context of the...
Freeway 1.4.1.171 - '/templates/Freeway/boxes/loginbox.php?language' Traversal Local File Inclusion
source: https://www.securityfocus.com/bid/30731/info Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal strings to view local files in the context of the...
Freeway 1.4.1.171 - '/includes/modules/newsdesk/newsdesk_article_require.php?language' Traversal Local File Inclusion
source: https://www.securityfocus.com/bid/30731/info Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal strings to view local files in the context of the...
Freeway 1.4.1.171 - includesmodulesnewsdesknewsdesk_article_require.php?language Traversal Local File Inclusion
Freeway 1.4.1.171 - includesmodulesnewsdesknewsdeskarticlerequire.php?language Traversal Local File Inclusion source: https://www.securityfocus.com/bid/30731/info Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker...
Cross site scripting
Cross-site scripting XSS vulnerability in admin/searchlinks.php in Freeway before 1.4.2.197 allows remote attackers to inject arbitrary web script or HTML via the URL...
CVE-2008-3677
Directory traversal vulnerability in includes/eventsapplicationtop.php in Freeway before 1.4.2.197 allows remote attackers to include and execute arbitrary local files via unspecified vectors...
Directory traversal
Directory traversal vulnerability in includes/eventsapplicationtop.php in Freeway before 1.4.2.197 allows remote attackers to include and execute arbitrary local files via unspecified vectors...
CVE-2008-3678
CVE-2008-3678 is a cross-site scripting (XSS) vulnerability in Freeway prior to 1.4.2.197, specifically in admin/search_links.php. The flaw allows remote attackers to inject arbitrary web script or HTML via the URL, enabling script execution in the context of the affected user. The public referen...
CVE-2008-3677
Directory traversal vulnerability in includes/eventsapplicationtop.php in Freeway before 1.4.2.197 allows remote attackers to include and execute arbitrary local files via unspecified vectors...
CVE-2008-3677
Summary (concrete details from documents): CVE-2008-3677 is a directory traversal vulnerability in Freeway prior to 1.4.2.197, affecting the includes/events_application_top.php file. The flaw allows remote attackers to include and execute arbitrary local files via unspecified vectors. The availab...