CVE

Id
19706  
CVE No.
CVE-2006-3602  
Status
Candidate  
Description
Directory traversal vulnerability in jscripts/tiny_mce/tiny_mce_gzip.php in FarsiNews 3.0 BETA 1 allows remote attackers to include arbitrary files via a .. (dot dot) sequence and trailing null (%00) byte in the language parameter in the advanced theme.  
Phase
Assigned (20060714)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
178493 19706 CVE-2006-3602 BUGTRAQ:20060710 Local file inclusion in Farsinews3.0BETA1  View
178494 19706 CVE-2006-3602 URL:http://www.securityfocus.com/archive/1/archive/1/439664/100/0/threaded  View
178495 19706 CVE-2006-3602 BUGTRAQ:20060721 SECURITY UPDATE::Farsinews release FarsiNewsPro3.0Stable1SecurityPath1  View
178496 19706 CVE-2006-3602 URL:http://www.securityfocus.com/archive/1/archive/1/440757/100/0/threaded  View
178497 19706 CVE-2006-3602 MISC:http://forum.farsinewsteam.com/showthread.php?p=16  View
178498 19706 CVE-2006-3602 BID:18925  View
178499 19706 CVE-2006-3602 URL:http://www.securityfocus.com/bid/18925  View
178500 19706 CVE-2006-3602 SECTRACK:1016464  View
178501 19706 CVE-2006-3602 URL:http://securitytracker.com/id?1016464  View
178502 19706 CVE-2006-3602 XF:farsinews-tinymcegzip-file-include(27650)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60496 JVNDB-2006-002762 FlexWATCH Network Camera におけるディレクトリトラバーサルの脆弱性 FlexWATCH Network Camera には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2006-3604 19706 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002762.html  View