CVE-2006-1823

CVE-2006-1823 corresponds to a directory traversal vulnerability in FarsiNews 2.5.3 Pro and earlier. The flaw allows remote attackers to obtain the installation path by using ".." sequences in the archive parameter to index.php, causing an error message that leaks the full pathname. This is the c...