CVE-2006-0660

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Farsinews 2.1/2.5 - 'show_archives.php?template' Traversal Arbitrary File Access2006-02-10 · webapps · php · Verified
• Farsinews 2.5 - Directory Traversal Arbitrary 'users.db' Access2006-02-28 · webapps · php · Verified

Impact

Multiple directory traversal vulnerabilities in FarsiNews 2.5 and earlier allows remote attackers to (1) read arbitrary files or trigger an error message path disclosure via ".." or invalid names in the archive parameter to index.php, or (2) include arbitrary files via the template parameter to show_archives.php.

Affected products

References

• NVD record
• CVE.org record
• http://forum.farsinewsteam.com/index.php?showtopic=71
• http://forum.farsinewsteam.com/index.php?showtopic=76
• http://secunia.com/advisories/18768
• http://www.hamid.ir/security/farsinews2-5.txt
• http://www.osvdb.org/23020
• http://www.osvdb.org/23021
• http://www.osvdb.org/23022
• http://www.securityfocus.com/archive/1/424720/100/0/threaded
• http://www.securityfocus.com/bid/16580
• http://www.vupen.com/english/advisories/2006/0506
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24598
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24602
• http://forum.farsinewsteam.com/index.php?showtopic=71
• http://forum.farsinewsteam.com/index.php?showtopic=76
• http://secunia.com/advisories/18768
• http://www.hamid.ir/security/farsinews2-5.txt
• http://www.osvdb.org/23020
• http://www.osvdb.org/23021
• http://www.osvdb.org/23022
• http://www.securityfocus.com/archive/1/424720/100/0/threaded
• http://www.securityfocus.com/bid/16580
• http://www.vupen.com/english/advisories/2006/0506
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24598
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24602