GCVE - cpe:2.3:a:farsinews:farsinews:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:farsinews:farsinews:*:*:*:*:*:*:*:*

part: a version: * update: *

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-2084`	vulnerable	2026-06-08 04:48:58.831054	Details available Multiple cross-site scripting (XSS) vulnerabilities in FarsiNews 2.5.3 Pro and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) month and (2) year parameters in (a) index.php, and the (3) mod parameter in (b) admin.php. Published: 2006-04-29T10:00:00.000Z Updated: 2024-08-07T17:35:31.275Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/812 http://www.aria-security.net/advisory/farsinews/farsinews0420062.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/26097 http://www.securityfocus.com/bid/17701 http://www.securityfocus.com/archive/1/432109/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0502`	vulnerable	2026-06-08 04:48:54.178458	Details available PHP remote file inclusion vulnerability in loginout.php in FarsiNews 2.1 Beta 2 and earlier, with register_globals enabled, allows remote attackers to include arbitrary files via a URL in the cutepath parameter. Published: 2006-02-01T22:00:00.000Z Updated: 2024-08-07T16:34:14.822Z Open on db.gcve.eu Reference links http://www.hamid.ir/security/farsinews.txt http://securitytracker.com/id?1015554 http://www.vupen.com/english/advisories/2006/0411 http://secunia.com/advisories/18637 http://securityreason.com/securityalert/390	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.