← Database

CVE-2007-3651

MEDIUM CVSS: 5.3 Published: 2008-07-09 Modified: 2026-06-16

Description

class/page.php in Farsi Script (aka FaScript) FaName 1.0 allows remote attackers to obtain sensitive information via a '; (quote semicolon) sequence in the id parameter, which reveals the installation path in an error message.

Affected Platforms

Fascript Faname

Weakness Type

CWE-200, CWE-200

References