CVE-2007-3651

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-07-09 · updated 2026-06-16
Weakness: CWE-200

Description

class/page.php in Farsi Script (aka FaScript) FaName 1.0 allows remote attackers to obtain sensitive information via a '; (quote semicolon) sequence in the id parameter, which reveals the installation path in an error message.

Affected products

Fascript Faname: 1.0

References

http://descriptions.securescout.com/tc/17971
http://www.netvigilance.com/advisory0041
http://descriptions.securescout.com/tc/17971
http://www.netvigilance.com/advisory0041

Get alerted when CVE-2007-3651 or the next vulnerability affects your stack