GCVE - cpe:2.3:a:farsinews:farsinews:2.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:farsinews:farsinews:2.5:*:*:*:*:*:*:*

part: a version: 2.5 update: *

Vendor	Farsinews (`51ecf3f7-f443-5eb6-80f0-5587ca555083`)
Product	Farsinews (`5a414239-f207-502d-9787-8a1d71aaf2da`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-2084`	vulnerable	2026-06-08 04:48:58.831120	Details available Multiple cross-site scripting (XSS) vulnerabilities in FarsiNews 2.5.3 Pro and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) month and (2) year parameters in (a) index.php, and the (3) mod parameter in (b) admin.php. Published: 2006-04-29T10:00:00.000Z Updated: 2024-08-07T17:35:31.275Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/812 http://www.aria-security.net/advisory/farsinews/farsinews0420062.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/26097 http://www.securityfocus.com/bid/17701 http://www.securityfocus.com/archive/1/432109/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1823`	vulnerable	2026-06-08 04:48:58.097605	Details available Directory traversal vulnerability in FarsiNews 2.5.3 Pro and earlier allows remote attackers to obtain the installation path via ".." sequences in the archive parameter to index.php, which leaks the full pathname in an error message. Published: 2006-04-18T10:00:00.000Z Updated: 2024-08-07T17:27:29.191Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/431011/100/0/threaded http://securitytracker.com/id?1015943 http://securityreason.com/securityalert/710 http://secunia.com/advisories/19648 http://www.vupen.com/english/advisories/2006/1411	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1822`	vulnerable	2026-06-08 04:48:58.095937	Details available Cross-site scripting (XSS) vulnerability in search.php in FarsiNews 2.5.3 Pro and earlier allows remote attackers to inject arbitrary web script or HTML via the selected_search_arch parameter. Published: 2006-04-18T10:00:00.000Z Updated: 2024-08-07T17:27:29.000Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/431011/100/0/threaded http://securitytracker.com/id?1015943 http://securityreason.com/securityalert/710 http://secunia.com/advisories/19648 http://www.securityfocus.com/bid/17534	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0660`	vulnerable	2026-06-08 04:48:54.809804	Details available Multiple directory traversal vulnerabilities in FarsiNews 2.5 and earlier allows remote attackers to (1) read arbitrary files or trigger an error message path disclosure via ".." or invalid names in the archive parameter to index.php, or (2) include arbitrary files via the template parameter to show_archives.php. Published: 2006-02-13T11:00:00.000Z Updated: 2024-08-07T16:41:29.153Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/24598 http://www.vupen.com/english/advisories/2006/0506 https://exchange.xforce.ibmcloud.com/vulnerabilities/24602 http://www.securityfocus.com/archive/1/424720/100/0/threaded http://forum.farsinewsteam.com/index.php?showtopic=76	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Farsinews

Notes

PURL mappings

Vulnerability references

Contribute