{"api_version":"1","generated_at":"2026-07-23T13:12:50+00:00","cve":"CVE-2006-0660","urls":{"html":"https://cve.report/CVE-2006-0660","api":"https://cve.report/api/cve/CVE-2006-0660.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-0660","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-0660"},"summary":{"title":"CVE-2006-0660","description":"Multiple directory traversal vulnerabilities in FarsiNews 2.5 and earlier allows remote attackers to (1) read arbitrary files or trigger an error message path disclosure via \"..\"  or invalid names in the archive parameter to index.php, or (2) include arbitrary files via the template parameter to show_archives.php.","state":"PUBLISHED","assigner":"mitre","published_at":"2006-02-13 11:06:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.4","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://forum.farsinewsteam.com/index.php?showtopic=71","name":"http://forum.farsinewsteam.com/index.php?showtopic=71","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IPS Driver Error","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.osvdb.org/23021","name":"http://www.osvdb.org/23021","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.hamid.ir/security/farsinews2-5.txt","name":"http://www.hamid.ir/security/farsinews2-5.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"],"title":"","mime":"text/html","httpstatus":"200","archivestatus":"403"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24602","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24602","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/18768","name":"http://secunia.com/advisories/18768","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"FarsiNews Local File Inclusion Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2006/0506","name":"http://www.vupen.com/english/advisories/2006/0506","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/424720/100/0/threaded","name":"http://www.securityfocus.com/archive/1/424720/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24598","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24598","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/23022","name":"http://www.osvdb.org/23022","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/23020","name":"http://www.osvdb.org/23020","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.securityfocus.com/bid/16580","name":"http://www.securityfocus.com/bid/16580","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"FarsiNews Directory Traversal and Local File Include Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://forum.farsinewsteam.com/index.php?showtopic=76","name":"http://forum.farsinewsteam.com/index.php?showtopic=76","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"FarsiNews Forums - صفحه اصلي","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-0660","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-0660","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"660","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"farsinews","cpe5":"farsinews","cpe6":"2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"660","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"farsinews","cpe5":"farsinews","cpe6":"2.1_beta2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"660","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"farsinews","cpe5":"farsinews","cpe6":"2.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2006","cve_id":"660","cve":"CVE-2006-0660","epss":"0.097840000","percentile":"0.929660000","score_date":"2026-04-16","updated_at":"2026-04-17 00:09:25"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T16:41:29.153Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"farsinews-showarchives-file-include(24598)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24598"},{"name":"ADV-2006-0506","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2006/0506"},{"name":"farsinews-index-directory-traversal(24602)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24602"},{"name":"20060210 FarsiNews 2.5 Multiple Vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/424720/100/0/threaded"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://forum.farsinewsteam.com/index.php?showtopic=76"},{"name":"23020","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/23020"},{"name":"16580","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/16580"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://forum.farsinewsteam.com/index.php?showtopic=71"},{"name":"23021","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/23021"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.hamid.ir/security/farsinews2-5.txt"},{"name":"23022","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/23022"},{"name":"18768","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/18768"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2006-02-10T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in FarsiNews 2.5 and earlier allows remote attackers to (1) read arbitrary files or trigger an error message path disclosure via \"..\"  or invalid names in the archive parameter to index.php, or (2) include arbitrary files via the template parameter to show_archives.php."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-19T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"farsinews-showarchives-file-include(24598)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24598"},{"name":"ADV-2006-0506","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2006/0506"},{"name":"farsinews-index-directory-traversal(24602)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24602"},{"name":"20060210 FarsiNews 2.5 Multiple Vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/424720/100/0/threaded"},{"tags":["x_refsource_MISC"],"url":"http://forum.farsinewsteam.com/index.php?showtopic=76"},{"name":"23020","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/23020"},{"name":"16580","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/16580"},{"tags":["x_refsource_MISC"],"url":"http://forum.farsinewsteam.com/index.php?showtopic=71"},{"name":"23021","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/23021"},{"tags":["x_refsource_MISC"],"url":"http://www.hamid.ir/security/farsinews2-5.txt"},{"name":"23022","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/23022"},{"name":"18768","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/18768"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-0660","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple directory traversal vulnerabilities in FarsiNews 2.5 and earlier allows remote attackers to (1) read arbitrary files or trigger an error message path disclosure via \"..\"  or invalid names in the archive parameter to index.php, or (2) include arbitrary files via the template parameter to show_archives.php."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"farsinews-showarchives-file-include(24598)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24598"},{"name":"ADV-2006-0506","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2006/0506"},{"name":"farsinews-index-directory-traversal(24602)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24602"},{"name":"20060210 FarsiNews 2.5 Multiple Vulnerabilities","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/424720/100/0/threaded"},{"name":"http://forum.farsinewsteam.com/index.php?showtopic=76","refsource":"MISC","url":"http://forum.farsinewsteam.com/index.php?showtopic=76"},{"name":"23020","refsource":"OSVDB","url":"http://www.osvdb.org/23020"},{"name":"16580","refsource":"BID","url":"http://www.securityfocus.com/bid/16580"},{"name":"http://forum.farsinewsteam.com/index.php?showtopic=71","refsource":"MISC","url":"http://forum.farsinewsteam.com/index.php?showtopic=71"},{"name":"23021","refsource":"OSVDB","url":"http://www.osvdb.org/23021"},{"name":"http://www.hamid.ir/security/farsinews2-5.txt","refsource":"MISC","url":"http://www.hamid.ir/security/farsinews2-5.txt"},{"name":"23022","refsource":"OSVDB","url":"http://www.osvdb.org/23022"},{"name":"18768","refsource":"SECUNIA","url":"http://secunia.com/advisories/18768"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2006-0660","datePublished":"2006-02-13T11:00:00.000Z","dateReserved":"2006-02-13T00:00:00.000Z","dateUpdated":"2024-08-07T16:41:29.153Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2006-02-13 11:06:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:farsinews:farsinews:2.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB2CEC8-7EFF-410F-A4E2-CDC515F9E38E"},{"vulnerable":true,"criteria":"cpe:2.3:a:farsinews:farsinews:2.1_beta2:*:*:*:*:*:*:*","matchCriteriaId":"4F6F8CFD-D03F-494E-96E0-A8C9CCDC6355"},{"vulnerable":true,"criteria":"cpe:2.3:a:farsinews:farsinews:2.5:*:*:*:*:*:*:*","matchCriteriaId":"FA3F0B6F-F519-4717-B1A4-5CE599DB611F"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"660","Ordinal":"1","Title":"CVE-2006-0660","CVE":"CVE-2006-0660","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"660","Ordinal":"1","NoteData":"Multiple directory traversal vulnerabilities in FarsiNews 2.5 and earlier allows remote attackers to (1) read arbitrary files or trigger an error message path disclosure via \"..\"  or invalid names in the archive parameter to index.php, or (2) include arbitrary files via the template parameter to show_archives.php.","Type":"Description","Title":"CVE-2006-0660"},{"CveYear":"2006","CveId":"660","Ordinal":"2","NoteData":"2006-02-13","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"660","Ordinal":"3","NoteData":"2018-10-19","Type":"Other","Title":"Modified"}]}}}