CVE-2007-3652 SQL injection vulnerability in class/page.php in Farsi Script (aka FaScript) FaName 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this might be the same iss...

MediumCVSS 6.8 EPSS 1.0%

Published: 2008-07-09 17:27 (approximate time: when CVE Radar first recorded it)
Updated: 2026-06-17 01:42
Exploit status: No public exploit known

Description

SQL injection vulnerability in class/page.php in Farsi Script (aka FaScript) FaName 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this might be the same issue as CVE-2008-0328.

Affected products

Product	Affected versions	Fixed in
fascript faname	= 1.0	No fix listed

References

CVSS v2.0

6.8 Medium

AV:N/AC:M/Au:N/C:P/I:P/A:P

Access Vector: Network
Access Complexity: Medium
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

All scores (2)

v3.1 9.8 · cisa-adp
v2.0 6.8 · nvd@nist.gov

Weakness & likelihood

EPSS (exploitation probability, 30 days): 1.04% (percentile 64.6)
CWE: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.