CVE-2008-3677 Directory traversal vulnerability in includes/events_application_top.php in Freeway before 1.4.2.197 allows remote attackers to include and execute arbitrary local files via unspecified vectors.
MediumCVSS 6.8
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in includes/events_application_top.php in Freeway before 1.4.2.197 allows remote attackers to include and execute arbitrary local files via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openfreeway freeway | = 1.0.25-public_beta | No fix listed |
| openfreeway freeway | = 1.0.59 | No fix listed |
| openfreeway freeway | = 1.0.60 | No fix listed |
| openfreeway freeway | = 1.1.1.81 | No fix listed |
| openfreeway freeway | = 1.2.0.113 | No fix listed |
| openfreeway freeway | = 1.3.0.142 | No fix listed |
| openfreeway freeway | = 1.3.1.147 | No fix listed |
| openfreeway freeway | = 1.3.2.154 | No fix listed |
| openfreeway freeway | = 1.3.2.160-joomla_beta | No fix listed |
| openfreeway freeway | = 1.4-pre-release | No fix listed |
| openfreeway freeway | = 1.4.1 | No fix listed |
References
- 31475 third-party-advisory vendor-advisory
- sourceforge.net
- 30676 vdb-entry
- freeway-unspecified-file-include(44426) vdb-entry