CVE-2007-3651

class/page.php in Farsi Script (aka FaScript) FaName 1.0 allows remote attackers to obtain sensitive information via a '; (quote semicolon) sequence in the id parameter, which reveals the installation path in an error message.

Score

CVSS 3.1 5.3 Medium

Status

Modified - cve@mitre.org

Published

2008-07-09

Last modified

2025-04-03

Weaknesses

CWE-200

Affected products

• Faname (Fascript)

References

• http://descriptions.securescout.com/tc/17971
• http://www.netvigilance.com/advisory0041