PatchTheCVEfarsinews vulnerabilities and fixes
Recent CVEs affecting farsinews, with upgrade or downgrade steps. 6 tracked.
farsinews has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2006-07-18. Highest priority: CVE-2006-0502 (score 54/100).
- CVE-2006-3602 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in jscripts/tiny_mce/tiny_mce_gzip.php in FarsiNews 3.0 BETA 1 allows remote
- CVE-2006-2084 MEDIUM 4.3 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in FarsiNews 2.5.3 Pro and earlier allow remote attackers
- CVE-2006-1823 MEDIUM 6.4 DOWNGRADE Directory traversal vulnerability in FarsiNews 2.5.3 Pro and earlier allows remote attackers to obtain the ins
- CVE-2006-1822 MEDIUM 5.8 DOWNGRADE Cross-site scripting (XSS) vulnerability in search.php in FarsiNews 2.5.3 Pro and earlier allows remote attack
- CVE-2006-0660 MEDIUM 6.4 DOWNGRADE Multiple directory traversal vulnerabilities in FarsiNews 2.5 and earlier allows remote attackers to (1) read
- CVE-2006-0502 HIGH 7.5 UPGRADE PHP remote file inclusion vulnerability in loginout.php in FarsiNews 2.1 Beta 2 and earlier, with register_glo
FAQ
How do I fix farsinews vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is farsinews being exploited right now?
None of the tracked farsinews CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which farsinews CVE should I patch first?
CVE-2006-0502 currently ranks highest (54/100): PHP remote file inclusion vulnerability in loginout.php in FarsiNews 2.1 Beta 2 and earlier, with register_glo.