CVE-2006-3602

概要

参考情報

• forum.farsinewsteam.com/showthread.php
• securitytracker.com/id · Exploit
• securityfocus.com/archive/1/439664/100/0/threaded
• securityfocus.com/archive/1/440757/100/0/threaded
• securityfocus.com/bid/18925 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/27650

farsinews のその他の脆弱性

• CVE-2006-2084中 4.3Multiple cross-site scripting (XSS) vulnerabilities in FarsiNews 2.5.3 Pro and earlier allow remote attackers to inject arbitrary web script…
• CVE-2006-1823中 6.4Directory traversal vulnerability in FarsiNews 2.5.3 Pro and earlier allows remote attackers to obtain the installation path via ".." sequen…
• CVE-2006-1822中 5.8Cross-site scripting (XSS) vulnerability in search.php in FarsiNews 2.5.3 Pro and earlier allows remote attackers to inject arbitrary web sc…
• CVE-2006-0660中 6.4Multiple directory traversal vulnerabilities in FarsiNews 2.5 and earlier allows remote attackers to (1) read arbitrary files or trigger an …
• CVE-2006-0502高 7.5PHP remote file inclusion vulnerability in loginout.php in FarsiNews 2.1 Beta 2 and earlier, with register_globals enabled, allows remote at…