Fascript

    Dashboard / Vendors

    Products: 6
    Vulnerabilities: 9
    Known Exploited: 0
    1
    Critical Level Threats
    5
    High Level Threats
    3
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2008-5766

    SQL injection vulnerability in download.php in Farsi Script Faupload allows remote attackers to execute arbitrary SQL commands via the id parameter.

    Last Modified: Apr 23, 2026
    Published: Dec 30, 2008

    CVE-2007-3651

    class/page.php in Farsi Script (aka FaScript) FaName 1.0 allows remote attackers to obtain sensitive information via a '; (quote semicolon) sequence in the id parameter, which reveals the installation path in an error message.

    Last Modified: Apr 23, 2026
    Published: Jul 09, 2008

    CVE-2007-3653

    Multiple cross-site scripting (XSS) vulnerabilities in Farsi Script (aka FaScript) FaName 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) key or (2) desc parameter to index.php, or (3) the name parameter to page.php.

    Last Modified: Apr 23, 2026
    Published: Jul 09, 2008

    CVE-2007-3652

    SQL injection vulnerability in class/page.php in Farsi Script (aka FaScript) FaName 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this might be the same issue as CVE-2008-0328.

    Last Modified: Apr 23, 2026
    Published: Jul 09, 2008

    CVE-2008-1714

    SQL injection vulnerability in show.php in FaScript FaPhoto 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter.

    Last Modified: Apr 23, 2026
    Published: Apr 09, 2008
    Items Per Page