CVE-2006-0660
FarsiNews 2.5 - Directory Traversal and Arbitrary File Read via Archive Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-0660. PoCs published by Hessam-x, Hamid Ebadi.
AI-analyzed exploit summary This exploit leverages a path traversal vulnerability in FarsiNews 2.5Pro to read the contents of the users.db.php file, exposing usernames and MD5-hashed passwords. The exploit constructs a malicious URL with a null byte to bypass file extension checks and retrieve sensitive data.
Description
Multiple directory traversal vulnerabilities in FarsiNews 2.5 and earlier allows remote attackers to (1) read arbitrary files or trigger an error message path disclosure via ".." or invalid names in the archive parameter to index.php, or (2) include arbitrary files via the template parameter to show_archives.php.
Exploits (2)
This exploit leverages a path traversal vulnerability in FarsiNews 2.5Pro to read the contents of the users.db.php file, exposing usernames and MD5-hashed passwords. The exploit constructs a malicious URL with a null byte to bypass file extension checks and retrieve sensitive data.
The exploit describes directory traversal and local file inclusion vulnerabilities in FarsiNews due to improper input sanitization. It allows attackers to retrieve arbitrary files or include local files, potentially leading to arbitrary code execution if malicious scripts are present.