CVE-2019-13396

FlightPath is affected by CVE-2019-13396: versions prior to 4.8.2 and 5.0-rc2 contain a Local File Inclusion vulnerability caused by include_once in system_handle_form_submit, enabling directory traversal via the form_include parameter in index.php?q=system-handle-form-submit. Impact cited includ...

CVE-2024-50983

FlightPath version 7.5 is susceptible to a Cross-Site Scripting (XSS) vulnerability. This flaw allows authenticated remote attackers with administrative rights to inject arbitrary JavaScript into a user's web browser. The attack vector involves including a malicious payload within the Last Name s...