Farsinews: >> Farsinews >> 3.0_beta_1 Security Vulnerabilities
Directory traversal vulnerability in jscripts/tiny_mce/tiny_mce_gzip.php in FarsiNews 3.0 BETA 1 allows remote attackers to include arbitrary files via a .. (dot dot) sequence and trailing null (%00) byte in the language parameter in the advanced theme.
CVSS Score
5.0
EPSS Score
0.05
Published
2006-07-18