Fascript

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-5766 1Fascript 1Faupload Apr 23, 2026 Dec 30, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in download.php in Farsi Script Faupload allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2007-3653 1Fascript 1Faname Apr 23, 2026 Jul 9, 2008 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in Farsi Script (aka FaScript) FaName 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) key or (2) desc parameter to index.php, or (3) the n...Show more Multiple cross-site scripting (XSS) vulnerabilities in Farsi Script (aka FaScript) FaName 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) key or (2) desc parameter to index.php, or (3) the name parameter to page.php.Show less
CVE-2007-3652 1Fascript 1Faname Apr 23, 2026 Jul 9, 2008 N/A· v4 9.8 CRITICAL· v3 6.8 MEDIUM· v2 SQL injection vulnerability in class/page.php in Farsi Script (aka FaScript) FaName 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this might be the same issue as CVE-2008-0328...Show more SQL injection vulnerability in class/page.php in Farsi Script (aka FaScript) FaName 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this might be the same issue as CVE-2008-0328.Show less
CVE-2007-3651 1Fascript 1Faname Apr 23, 2026 Jul 9, 2008 N/A· v4 5.3 MEDIUM· v3 4.3 MEDIUM· v2 class/page.php in Farsi Script (aka FaScript) FaName 1.0 allows remote attackers to obtain sensitive information via a '; (quote semicolon) sequence in the id parameter, which reveals the installation path in an error me...Show more class/page.php in Farsi Script (aka FaScript) FaName 1.0 allows remote attackers to obtain sensitive information via a '; (quote semicolon) sequence in the id parameter, which reveals the installation path in an error message.Show less
CVE-2008-1714 1Fascript 1Faphoto Apr 23, 2026 Apr 9, 2008 N/A· v4 N/A· v3 6.8 MEDIUM· v2 SQL injection vulnerability in show.php in FaScript FaPhoto 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-0328 1Fascript 1Faname Apr 23, 2026 Jan 17, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in page.php in FaScript FaName 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-0327 1Fascript 1Famp3 Apr 23, 2026 Jan 17, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in show.php in FaScript FaMp3 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-0326 1Fascript 1Fapersianhack Apr 23, 2026 Jan 17, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in class/show.php in FaScript FaPersianHack 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to show.php.
CVE-2008-0325 1Fascript 1Fapersian Petition Apr 23, 2026 Jan 17, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in show.php in FaScript FaPersian Petition allows remote attackers to execute arbitrary SQL commands via the id parameter.