CVE-2006-1823

Published: Apr 18, 2006Modified: Apr 16, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

Directory traversal vulnerability in FarsiNews 2.5.3 Pro and earlier allows remote attackers to obtain the installation path via ".." sequences in the archive parameter to index.php, which leaks the full pathname in an error message.

Affected (4)

Products: Farsinews: Farsinews

Farsinews

1 product

Farsinews

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Farsinews Farsinews	Version 2.1
Farsinews Farsinews	Version 2.1_beta2
Farsinews Farsinews	Version 2.5.3
Farsinews Farsinews	Version 2.5

References (10)

http://secunia.com/advisories/19648

Source: cve@mitre.org

http://securityreason.com/securityalert/710

Source: cve@mitre.org

http://securitytracker.com/id?1015943

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/431011/100/0/threaded

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1411

Source: cve@mitre.org

http://secunia.com/advisories/19648