Published: 22/08/2008 Updated: 11/10/2018

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 720

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Subscribe to Freeway

Multiple directory traversal vulnerabilities in Freeway 1.4.1.171, when register_globals is enabled, allow remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the language parameter to (1) includes/events_application_top.php; (2) english/account.php, (3) french/account.php, and (4) french/account_newsletters.php in includes/languages/; (5) includes/modules/faqdesk/faqdesk_article_require.php; (6) includes/modules/newsdesk/newsdesk_article_require.php; (7) card1.php, (8) loginbox.php, and (9) whos_online.php in templates/Freeway/boxes/; and (10) templates/Freeway/mainpage_modules/mainpage.php. NOTE: vector 1 may be the same as CVE-2008-3677.

Vulnerable Product	Search on Vulmon	Subscribe to Product
openfreeway freeway 1.4.1.171

source: wwwsecurityfocuscom/bid/30731/info Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input An attacker can exploit these vulnerabilities using directory-traversal strings to view local files in the context of the webserver process This may aid in furthe ...

source: wwwsecurityfocuscom/bid/30731/info Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input An attacker can exploit these vulnerabilities using directory-traversal strings to view local files in the context of the webserver process This may aid in fu ...

source: wwwsecurityfocuscom/bid/30731/info Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input An attacker can exploit these vulnerabilities using directory-traversal strings to view local files in the context of the webserver process This may aid in further at ...

source: wwwsecurityfocuscom/bid/30731/info Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input An attacker can exploit these vulnerabilities using directory-traversal strings to view local files in the context of the webserver process This may aid in further attacks ...

source: wwwsecurityfocuscom/bid/30731/info Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input An attacker can exploit these vulnerabilities using directory-traversal strings to view local files in the context of the webserver process This may aid in furt ...

source: wwwsecurityfocuscom/bid/30731/info Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input An attacker can exploit these vulnerabilities using directory-traversal strings to view local files in the context of the webserver process This may aid in further atta ...

source: wwwsecurityfocuscom/bid/30731/info Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input An attacker can exploit these vulnerabilities using directory-traversal strings to view local files in the context of the webserver process This may aid in ...

source: wwwsecurityfocuscom/bid/30731/info Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input An attacker can exploit these vulnerabilities using directory-traversal strings to view local files in the context of the webserver process This may aid in further ...

CWE-22 http://www.openfreeway.org/download/change-log.html http://www.securityfocus.com/bid/30731 http://secunia.com/advisories/31475 http://securityreason.com/securityalert/4181 https://exchange.xforce.ibmcloud.com/vulnerabilities/45037 http://www.securityfocus.com/archive/1/495549/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/32267/

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook