CVE-2019-13396

FlightPath is affected by CVE-2019-13396: versions prior to 4.8.2 and 5.0-rc2 contain a Local File Inclusion vulnerability caused by include_once in system_handle_form_submit, enabling directory traversal via the form_include parameter in index.php?q=system-handle-form-submit. Impact cited includ...

CVE-2024-50983

CVE-2024-50983 affects FlightPath 7.5 with a Cross Site Scripting (XSS) vulnerability. The issue allows authenticated remote attackers with administrative rights to inject arbitrary JavaScript in a user’s browser by submitting a malicious payload in the Last Name field of the Create/Edit Faculty/...