CVE-2008-3678

CVE-2008-3678 is a cross-site scripting (XSS) vulnerability in Freeway prior to 1.4.2.197, specifically in admin/search_links.php. The flaw allows remote attackers to inject arbitrary web script or HTML via the URL, enabling script execution in the context of the affected user. The public referen...

CVE-2008-3677

Summary (concrete details from documents): CVE-2008-3677 is a directory traversal vulnerability in Freeway prior to 1.4.2.197, affecting the includes/events_application_top.php file. The flaw allows remote attackers to include and execute arbitrary local files via unspecified vectors. The availab...

CVE-2008-3678: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/searchlinks.php in Freeway before 1.4.2.197 allows remote attackers to inject arbitrary web script or HTML via the URL...

CVE-2008-3677: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in includes/eventsapplicationtop.php in Freeway before 1.4.2.197 allows remote attackers to include and execute arbitrary local files via unspecified vectors...

Freeway 1.4.1 - Multiple Input Validation Vulnerabilities

Freeway 1.4.1 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/30676/info Freeway is prone to multiple remote file-include and cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. Freeway 1.4.1.171 is affected; other...

Freeway 1.4.1 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/30676/info Freeway is prone to multiple remote file-include and cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. Freeway 1.4.1.171 is affected; other versions may also be vulnerable. 1. Multiple Remote/Local...