CVE-2019-13396: FlightPath 4.x and 5.0-x allows directory traversal and Local File Inclusion through the form_include param...

Security readout for executives and security teams

CVE-2019-13396 is a directory traversal and local file inclusion issue in FlightPath 4.x and 5.0-x. A crafted form submission can cause the application to include a server-side file chosen through user input. This can expose sensitive files or, in some configurations, support further compromise. Exposure is likely limited to organizations running FlightPath 4.x or 5.0-x, especially internet-facing deployments. The CVE record’s affected vendor/product fields are not populated, so confirm exposure by checking application name, version, and whether the vulnerable form handling code exists. Prioritize remediation for internet-facing FlightPath systems because local file inclusion can expose sensitive server data and may enable deeper compromise. Internal-only systems are still relevant, but urgency depends on access controls and compensating network restrictions. Mitigation focus: Check FlightPath vendor guidance for a fixed release or official workaround.; Upgrade vulnerable FlightPath 4.x or 5.0-x installations if a fixed version is available.; Restrict external access to FlightPath until remediation is confirmed..

Prepared

Jun 6, 2026, 20:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.