CVE-2008-3677

Directory traversal vulnerability in includes/events_application_top.php in Freeway before 1.4.2.197 allows remote attackers to include and execute arbitrary local files via unspecified vectors.

Link	Resource
http://sourceforge.net/project/shownotes.php?release_id=619467
http://secunia.com/advisories/31475	Vendor Advisory
http://www.securityfocus.com/bid/30676
https://exchange.xforce.ibmcloud.com/vulnerabilities/44426

Configuration 1

cpe:2.3:a:openfreeway:freeway:1.4.1:*:*:*:*:*:*:* cpe:2.3:a:openfreeway:freeway:1.0.59:*:*:*:*:*:*:* cpe:2.3:a:openfreeway:freeway:1.0.60:*:*:*:*:*:*:* cpe:2.3:a:openfreeway:freeway:1.4:pre-release:*:*:*:*:*:* cpe:2.3:a:openfreeway:freeway:1.3.2.154:*:*:*:*:*:*:* cpe:2.3:a:openfreeway:freeway:1.3.2.160:joomla_beta:*:*:*:*:*:* cpe:2.3:a:openfreeway:freeway:1.3.1.147:*:*:*:*:*:*:* cpe:2.3:a:openfreeway:freeway:1.3.0.142:*:*:*:*:*:*:* cpe:2.3:a:openfreeway:freeway:1.1.1.81:*:*:*:*:*:*:* cpe:2.3:a:openfreeway:freeway:1.2.0.113:*:*:*:*:*:*:* cpe:2.3:a:openfreeway:freeway:1.0.25:public_beta:*:*:*:*:*:*

---

Published : 2008-08-14 07:41

Updated : 2017-08-08 01:32

---

NVD link : CVE-2008-3677

Mitre link : CVE-2008-3677

No products.

CWE-22