CVE-2019-13396
72Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 63%
from disclosure to weapon5 days
Published on NVDJul 10
1st PoC+5d
VulnCheck+2497d
exploitation probability
63%top 1% of all CVEs
observed exploitation
yesVulnCheck
2 public exploit(s)
FlightPath 4.x and 5.0-x allows directory traversal and Local File Inclusion through the form_include parameter in an index.php?q=system-handle-form-submit POST request because of an include_once in system_handle_form_submit in modules/system/system.module.
Affected products
n/a · n/apublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/47121unverifiedcve_referencepacketstormsecurity.com/files/153626/FlightPath-Local-File-Inclusion.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.