← back
CVE-2007-3652

CVE-2007-3652

CVSS 9.8 CRITICALEPSS 1.0%CWE-89
Vexday Risk Score
28Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 9.8EPSS 1.0%KEV nãoPoC Nuclei Metasploit Patch
Lifecycle
09 Jul 2008Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
SQL injection vulnerability in class/page.php in Farsi Script (aka FaScript) FaName 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this might be the same issue as CVE-2008-0328.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a