CVE-2006-1823

medium

Description

Directory traversal vulnerability in FarsiNews 2.5.3 Pro and earlier allows remote attackers to obtain the installation path via ".." sequences in the archive parameter to index.php, which leaks the full pathname in an error message.

References

http://www.vupen.com/english/advisories/2006/1411

http://www.securityfocus.com/archive/1/431011/100/0/threaded

http://securitytracker.com/id?1015943

http://securityreason.com/securityalert/710

http://secunia.com/advisories/19648

Details

Source: Mitre, NVD

Published: 2006-04-18

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 6.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 5.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N