Skip to content
Noroxi

fascript records

9 published records for vendor fascript.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
7
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    9 records
    • CVE-2007-3652
      39Monitor

      SQL injection vulnerability in class/page.php in Farsi Script (aka FaScript) FaName 1.0 allows remote attackers to execute arbitrary SQL com

      CriticalCVSS 9.8No exploitEPSS 1%

      fascript · fanameJul 8, 2008

    • CVE-2008-5766
      31Monitor

      SQL injection vulnerability in download.php in Farsi Script Faupload allows remote attackers to execute arbitrary SQL commands via the id pa

      HighCVSS 7.5Proof of conceptEPSS 2%

      fascript · fauploadDec 30, 2008

    • CVE-2008-0327
      30Monitor

      SQL injection vulnerability in show.php in FaScript FaMp3 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter

      HighCVSS 7.5Proof of conceptEPSS 1%

      fascript · famp3Jan 17, 2008

    • CVE-2008-0328
      30Monitor

      SQL injection vulnerability in page.php in FaScript FaName 1.0 allows remote attackers to execute arbitrary SQL commands via the id paramete

      HighCVSS 7.5Proof of conceptEPSS 1%

      fascript · fanameJan 17, 2008

    • CVE-2008-0326
      30Monitor

      SQL injection vulnerability in class/show.php in FaScript FaPersianHack 1.0 allows remote attackers to execute arbitrary SQL commands via th

      HighCVSS 7.5Proof of conceptEPSS 1%

      fascript · fapersianhackJan 17, 2008

    • CVE-2008-0325
      30Monitor

      SQL injection vulnerability in show.php in FaScript FaPersian Petition allows remote attackers to execute arbitrary SQL commands via the id

      HighCVSS 7.5Proof of conceptEPSS 1%

      fascript · fapersian petitionJan 17, 2008

    • CVE-2008-1714
      27Monitor

      SQL injection vulnerability in show.php in FaScript FaPhoto 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbit

      MediumCVSS 6.8Proof of conceptEPSS 1%

      fascript · faphotoApr 9, 2008

    • CVE-2007-3651
      21Monitor

      class/page.php in Farsi Script (aka FaScript) FaName 1.0 allows remote attackers to obtain sensitive information via a '; (quote semicolon)

      MediumCVSS 5.3No exploitEPSS 1%

      fascript · fanameJul 8, 2008

    • CVE-2007-3653
      17Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in Farsi Script (aka FaScript) FaName 1.0 allow remote attackers to inject arbitrary web

      MediumCVSS 4.3Proof of conceptEPSS 1%

      fascript · fanameJul 8, 2008