CVE-2007-3651

Severity CVSS v4.0:
Pending analysis
Type:
CWE-200 Information Leak / Disclosure
Publication date:
09/07/2008
Last modified:
09/04/2025

Description

class/page.php in Farsi Script (aka FaScript) FaName 1.0 allows remote attackers to obtain sensitive information via a '; (quote semicolon) sequence in the id parameter, which reveals the installation path in an error message.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:fascript:faname:1.0:*:*:*:*:*:*:*