Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple directory traversal vulnerabilities in FarsiNews 2.5 and earlier allows remote attackers to (1) read arbitrary files or trigger an error message path disclosure via ".." or invalid names in the archive parameter to index.php, or (2) include arbitrary files via the template parameter to show_archives.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FarsiNews多个目录遍历漏洞
Vulnerability Description
FarsiNews 2.5及之前版本中存在多个目录遍历漏洞。远程攻击者可以(1)借助".."或指向index.php的archive参数中的无效名称读取任意文件或触发出错信息路径泄露，或(2)借助指向show_archives.php的template参数包含任意文件。
CVSS Information
N/A
Vulnerability Type
N/A