PT-2006-1766 · Linpha · Linpha

Rgod · Publicado 2006-02-15 · Atualizado 2018-10-19 · CVE-2006-0713

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions LinPHA version 1.0

Description The issue allows remote attackers to include arbitrary files via .. (dot dot) sequences in the lang parameter in "docs/index.php" and the language parameter in "install/install.php", "install/sec stage install.php", "install/third stage install.php", and "install/forth stage install.php". This can lead to direct static code injection, as demonstrated by inserting PHP code into the username, which is then inserted into linpha.log, making it accessible through the directory traversal.

Recommendations For LinPHA version 1.0, consider restricting access to the lang and language parameters in the affected PHP files until a patch is available. As a temporary workaround, avoid using the lang parameter in "docs/index.php" and the language parameter in the install scripts to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2006-0713

Produtos afetados

Linpha

Referências · 12

• 🔥 https://exploit-db.com/exploits/27192 · Exploit
• 🔥 https://exploit-db.com/exploits/27195 · Exploit
• 🔥 http://securityfocus.com/bid/16592 · Exploit
• 🔥 https://exploit-db.com/exploits/27193 · Exploit
• 🔥 https://exploit-db.com/exploits/27194 · Exploit
• 🔥 http://retrogod.altervista.org/linpha_10_local.html · Exploit
• http://securityreason.com/securityalert/426 · Nota
• http://vupen.com/english/advisories/2006/0535 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24663 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0713 · Nota de Segurança
• http://securityfocus.com/archive/1/424729/100/0/threaded · Nota
• http://secunia.com/advisories/18808 · Aviso do Fabricante