VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Jul 10, 2019· Updated Jun 17, 2026

CVE-2019-13396

CVE-2019-13396

Description

FlightPath 4.x and 5.0-x allows directory traversal and Local File Inclusion through the form_include parameter in an index.php?q=system-handle-form-submit POST request because of an include_once in system_handle_form_submit in modules/system/system.module.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • Getflightpath/Flightpath8 versions
    cpe:2.3:a:getflightpath:flightpath:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:getflightpath:flightpath:*:*:*:*:*:*:*:*range: >=4.0,<=4.8.3
    • cpe:2.3:a:getflightpath:flightpath:5.0:beta1:*:*:*:*:*:*
    • cpe:2.3:a:getflightpath:flightpath:5.0:beta2:*:*:*:*:*:*
    • cpe:2.3:a:getflightpath:flightpath:5.0:dev1:*:*:*:*:*:*
    • cpe:2.3:a:getflightpath:flightpath:5.0:dev2:*:*:*:*:*:*
    • cpe:2.3:a:getflightpath:flightpath:5.0:rc1:*:*:*:*:*:*
    • cpe:2.3:a:getflightpath:flightpath:5.0:rc2:*:*:*:*:*:*
    • cpe:2.3:a:getflightpath:flightpath:5.0:rc3:*:*:*:*:*:*
  • FlightPath/FlightPathdescription
  • FlightPath/FlightPathllm-fuzzy
    Range: 4.x and 5.0-x

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.