CVE-2007-3653

CVE-2007-3653 concerns multiple XSS vulnerabilities in FaName 1.0 (FaScript/Farsi Script). The affected component is FaName 1.0’s web front end (index.php and page.php) where user-controlled inputs in the key, desc, and name parameters can be injected with arbitrary HTML/JS. The root cause is ins...

CVE-2007-3651

Technical details about CVE-2007-3651 are not publicly available in the provided documents; no product/version specifics are disclosed. Monitor for updates.

CVE-2007-3652

Farsi Script (aka FaScript) FaName 1.0 is affected by an SQL injection vulnerability in the class/page.php component. Remote attackers can exploit the id parameter to execute arbitrary SQL commands. Successful exploitation typically requires PHP magic_quotes_gpc to be set to Off on the server. Wh...

CVE-2008-0328

CVE-2008-0328 describes an SQL injection in page.php of FaScript FaName 1.0, where the attacker can manipulate the id parameter to execute arbitrary SQL commands. The vulnerability is caused by unsafely incorporating user input into SQL queries, enabling unauthenticated remote access with potenti...