CVE-2006-0502

Description

References

• secunia.com/advisories/18637
• securityreason.com/securityalert/390
• securitytracker.com/id
• hamid.ir/security/farsinews.txt · Exploit
• osvdb.org/22878
• securityfocus.com/archive/1/423568/100/0/threaded
• securityfocus.com/bid/16440 · Exploit
• vupen.com/english/advisories/2006/0411
• exchange.xforce.ibmcloud.com/vulnerabilities/24419

farsinews 的其他漏洞

• CVE-2006-3602中危 5.0Directory traversal vulnerability in jscripts/tiny_mce/tiny_mce_gzip.php in FarsiNews 3.0 BETA 1 allows remote attackers to include arbitrar…
• CVE-2006-2084中危 4.3Multiple cross-site scripting (XSS) vulnerabilities in FarsiNews 2.5.3 Pro and earlier allow remote attackers to inject arbitrary web script…
• CVE-2006-1823中危 6.4Directory traversal vulnerability in FarsiNews 2.5.3 Pro and earlier allows remote attackers to obtain the installation path via ".." sequen…
• CVE-2006-1822中危 5.8Cross-site scripting (XSS) vulnerability in search.php in FarsiNews 2.5.3 Pro and earlier allows remote attackers to inject arbitrary web sc…
• CVE-2006-0660中危 6.4Multiple directory traversal vulnerabilities in FarsiNews 2.5 and earlier allows remote attackers to (1) read arbitrary files or trigger an …