NVD

Id
59391  
Name
CVE-2006-0660  
Description
Multiple directory traversal vulnerabilities in FarsiNews 2.5 and earlier allows remote attackers to (1) read arbitrary files or trigger an error message path disclosure via ".." or invalid names in the archive parameter to index.php, or (2) include arbitrary files via the template parameter to show_archives.php.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-02-13  
Modified Date
2011-03-07  
Seq
2006-0660  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
305339 59391 CVE-2006-0660 http://forum.farsinewsteam.com/index.php?showtopic=71  View
305340 59391 CVE-2006-0660 http://forum.farsinewsteam.com/index.php?showtopic=76  View
305341 59391 CVE-2006-0660 http://www.hamid.ir/security/farsinews2-5.txt  View
305342 59391 CVE-2006-0660 20060210 FarsiNews 2.5 Multiple Vulnerabilities  View
305343 59391 CVE-2006-0660 16580  View
305344 59391 CVE-2006-0660 ADV-2006-0506  View
305345 59391 CVE-2006-0660 farsinews-showarchives-file-include(24598)  View
305346 59391 CVE-2006-0660 farsinews-index-directory-traversal(24602)  View

Related JVN