EUVD-2006-3597

Malware in sbrugna...

CVE-2006-3602

Directory traversal vulnerability in jscripts/tinymce/tinymcegzip.php in FarsiNews 3.0 BETA 1 allows remote attackers to include arbitrary files via a .. dot dot sequence and trailing null %00 byte in the language parameter in the advanced theme...

CVE-2006-3602

CVE-2006-3602 affects FarsiNews 3.0 BETA 1, via directory traversal in jscripts/tiny_mce/tiny_mce_gzip.php. The underlying flaw allows remote attackers to include arbitrary files by supplying .. and a trailing null (%00) byte in the language parameter of the advanced theme, enabling partial integ...