Openfreeway : Security Vulnerabilities, CVEs, Published In 2008 (File inclusion)
PHP remote file inclusion vulnerability in admin/create_order_new.php in Freeway 1.4.1.171, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the include_page parameter.
Max CVSS
6.8
EPSS Score
1.06%
Published
2008-08-22
Updated
2018-10-11
1 vulnerabilities found