CVE-2019-13396

FlightPath 4.x and 5.0-x allows directory traversal and Local File Inclusion through the form_include parameter in an index.php?q=system-handle-form-submit POST request because of an include_once in system_handle_form_submit in modules/system/system.module.

• CWE-22

• http://getflightpath.com/node/2650Third Party Advisory
• http://packetstormsecurity.com/files/153626/FlightPath-Local-File-Inclusion.htmlExploit, Third Party Advisory
• http://getflightpath.com/node/2650Third Party Advisory
• http://packetstormsecurity.com/files/153626/FlightPath-Local-File-Inclusion.htmlExploit, Third Party Advisory

Published

Jul 10, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-13390In FFmpeg 4.1.3, there is a division by zero at adx_write_tr…
• CVE-2019-13391In ImageMagick 7.0.8-50 Q16, ComplexImages in MagickCore/fou…
• CVE-2019-13392A reflected Cross-Site Scripting (XSS) vulnerability in Mind…6.1
• CVE-2019-13393The Voo branded NETGEAR CG3700b custom firmware V2.02.03 use…7.5
• CVE-2019-13394The Voo branded NETGEAR CG3700b custom firmware V2.02.03 use…9.8
• CVE-2019-13395The Voo branded NETGEAR CG3700b custom firmware V2.02.03 all…8.8
• CVE-2019-13397Unauthenticated Stored XSS in osTicket 1.10.1 allows a remot…
• CVE-2019-13398Dynacolor FCM-MB40 v1.2.0.0 devices allow remote attackers t…
• CVE-2019-13399Dynacolor FCM-MB40 v1.2.0.0 devices have a hard-coded SSL/TL…
• CVE-2019-1340An elevation of privilege vulnerability exists in Windows Ap…7.8
• CVE-2019-13400Dynacolor FCM-MB40 v1.2.0.0 use /etc/appWeb/appweb.pass to s…
• CVE-2019-13401Dynacolor FCM-MB40 v1.2.0.0 devices have CSRF in all scripts…