CVE-2006-0713
published 2006-02-15CVE-2006-0713: Directory traversal vulnerability in LinPHA 1.0 allows remote attackers to include arbitrary files via .. (dot dot) sequences in the (1) lang parameter in…
PriorityP429medium5CVSS 2.0
AVNACLAuNCNIPAN
EXPLOIT
EPSS
3.02%
85.8th percentile
Directory traversal vulnerability in LinPHA 1.0 allows remote attackers to include arbitrary files via .. (dot dot) sequences in the (1) lang parameter in docs/index.php and the language parameter in (2) install/install.php, (3) install/sec_stage_install.php, (4) install/third_stage_install.php, and (5) install/forth_stage_install.php. NOTE: direct static code injection is resultant from this issue, as demonstrated by inserting PHP code into the username, which is inserted into linpha.log, which is accessible from the directory traversal.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| linpha | linpha | — | — |
| linpha | linpha | — | — |
| linpha | linpha | — | — |
| linpha | linpha | — | — |
| linpha | linpha | — | — |
| linpha | linpha | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
LinPHA 0.9.x/1.0 - 'lang' Local File Inclusion
exploitdb·2006-02-11
CVE-2006-0713 LinPHA 0.9.x/1.0 - 'lang' Local File Inclusion
LinPHA 0.9.x/1.0 - 'lang' Local File Inclusion
---
source: https://www.securityfocus.com/bid/16592/info
LinPHA is prone to multiple local file-inclusion and PHP code-injection vulnerabilities. The local file-inclusion issues are due to insecure use of the 'include_once()' PHP function in multiple scripts. The PHP code-injection vulnerabilities are due to insufficient input validation of data that is saved to log files.
This will permit an attacker to influence the include path to point to files that are hosted on the computer that is running the affected application. In this manner, files that are readable by the webserver process may be output to the attacker.
Attackers may also inject arbitrary PHP code into the log files and cause it to be interpreted. This would occur in the conte
Exploit-DB
LinPHA 0.9.x/1.0 - 'sec_stage_install.php' Local File Inclusion
exploitdb·2006-02-11
CVE-2006-0713 LinPHA 0.9.x/1.0 - 'sec_stage_install.php' Local File Inclusion
LinPHA 0.9.x/1.0 - 'sec_stage_install.php' Local File Inclusion
---
source: https://www.securityfocus.com/bid/16592/info
LinPHA is prone to multiple local file-inclusion and PHP code-injection vulnerabilities. The local file-inclusion issues are due to insecure use of the 'include_once()' PHP function in multiple scripts. The PHP code-injection vulnerabilities are due to insufficient input validation of data that is saved to log files.
This will permit an attacker to influence the include path to point to files that are hosted on the computer that is running the affected application. In this manner, files that are readable by the webserver process may be output to the attacker.
Attackers may also inject arbitrary PHP code into the log files and cause it to be interpreted. This would o
Exploit-DB
LinPHA 0.9.x/1.0 - 'forth_stage_install.php' Local File Inclusion
exploitdb·2006-02-11
CVE-2006-0713 LinPHA 0.9.x/1.0 - 'forth_stage_install.php' Local File Inclusion
LinPHA 0.9.x/1.0 - 'forth_stage_install.php' Local File Inclusion
---
source: https://www.securityfocus.com/bid/16592/info
LinPHA is prone to multiple local file-inclusion and PHP code-injection vulnerabilities. The local file-inclusion issues are due to insecure use of the 'include_once()' PHP function in multiple scripts. The PHP code-injection vulnerabilities are due to insufficient input validation of data that is saved to log files.
This will permit an attacker to influence the include path to point to files that are hosted on the computer that is running the affected application. In this manner, files that are readable by the webserver process may be output to the attacker.
Attackers may also inject arbitrary PHP code into the log files and cause it to be interpreted. This would
Exploit-DB
LinPHA 0.9.x/1.0 - 'install.php' Local File Inclusion
exploitdb·2006-02-11
CVE-2006-0713 LinPHA 0.9.x/1.0 - 'install.php' Local File Inclusion
LinPHA 0.9.x/1.0 - 'install.php' Local File Inclusion
---
source: https://www.securityfocus.com/bid/16592/info
LinPHA is prone to multiple local file-inclusion and PHP code-injection vulnerabilities. The local file-inclusion issues are due to insecure use of the 'include_once()' PHP function in multiple scripts. The PHP code-injection vulnerabilities are due to insufficient input validation of data that is saved to log files.
This will permit an attacker to influence the include path to point to files that are hosted on the computer that is running the affected application. In this manner, files that are readable by the webserver process may be output to the attacker.
Attackers may also inject arbitrary PHP code into the log files and cause it to be interpreted. This would occur in th
http://retrogod.altervista.org/linpha_10_local.htmlhttp://secunia.com/advisories/18808http://securityreason.com/securityalert/426http://www.securityfocus.com/archive/1/424729/100/0/threadedhttp://www.securityfocus.com/bid/16592http://www.vupen.com/english/advisories/2006/0535https://exchange.xforce.ibmcloud.com/vulnerabilities/24663http://retrogod.altervista.org/linpha_10_local.htmlhttp://secunia.com/advisories/18808http://securityreason.com/securityalert/426http://www.securityfocus.com/archive/1/424729/100/0/threadedhttp://www.securityfocus.com/bid/16592http://www.vupen.com/english/advisories/2006/0535https://exchange.xforce.ibmcloud.com/vulnerabilities/24663
2006-02-15
Published