Fascript

9 CVEs in 6 Fascript products, including Faname, Famp3, Fapersianhack. Newest: CVE-2008-5766 (2008-12-30). Severity, EPSS and public exploits for each.

Fascript products with known CVEs

ProductCVEs
Faname4
Famp31
Fapersianhack1
Fapersian Petition1
Faphoto1
Faupload1
Fascript CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2008-57662008-12-30SQL injection vulnerability in download.php in Farsi Script Faupload allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2007-36532008-07-09Multiple cross-site scripting (XSS) vulnerabilities in Farsi Script (aka FaScript) FaName 1.0 allow remote attackers to inject arbitrary web script or HTML via…
CVE-2007-3652Critical9.82008-07-09SQL injection vulnerability in class/page.php in Farsi Script (aka FaScript) FaName 1.0 allows remote attackers to execute arbitrary SQL commands via the id pa…
CVE-2007-3651Medium5.32008-07-09class/page.php in Farsi Script (aka FaScript) FaName 1.0 allows remote attackers to obtain sensitive information via a '; (quote semicolon) sequence in the id…
CVE-2008-17142008-04-09SQL injection vulnerability in show.php in FaScript FaPhoto 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands v…
CVE-2008-03282008-01-17SQL injection vulnerability in page.php in FaScript FaName 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-03272008-01-17SQL injection vulnerability in show.php in FaScript FaMp3 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-03262008-01-17SQL injection vulnerability in class/show.php in FaScript FaPersianHack 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to s…
CVE-2008-03252008-01-17SQL injection vulnerability in show.php in FaScript FaPersian Petition allows remote attackers to execute arbitrary SQL commands via the id parameter.