Freeway version 1.4.2.197 suffers from local file inclusion and cross site scripting vulnerabilities.