CVE-2006-0660 : Multiple directory traversal vulnerabilities in FarsiNews 2.5 and earlier allows

Multiple directory traversal vulnerabilities in FarsiNews 2.5 and earlier allows remote attackers to (1) read arbitrary files or trigger an error message path disclosure via ".." or invalid names in the archive parameter to index.php, or (2) include arbitrary files via the template parameter to show_archives.php.

Published 2006-02-13 11:06:00

Updated 2025-04-03 01:03:51

Source MITRE

View at NVD, CVE.org

Vulnerability category: Directory traversal

Products affected by CVE-2006-0660

Farsinews » Farsinews » Version: 2.1
cpe:2.3:a:farsinews:farsinews:2.1:*:*:*:*:*:*:*
Matching versions
Farsinews » Farsinews » Version: 2.1 Beta2
cpe:2.3:a:farsinews:farsinews:2.1_beta2:*:*:*:*:*:*:*
Matching versions
Farsinews » Farsinews » Version: 2.5
cpe:2.3:a:farsinews:farsinews:2.5:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2006-0660

EPSS FAQ

14.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 94 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2006-0660

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.4	MEDIUM	AV:N/AC:L/Au:N/C:P/I:P/A:N	10.0	4.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: None

References for CVE-2006-0660

Jump to

Vulnerability Details : CVE-2006-0660

Products affected by CVE-2006-0660

Exploit prediction scoring system (EPSS) score for CVE-2006-0660

CVSS scores for CVE-2006-0660

References for CVE-2006-0660