PT-2006-1766 · Linpha · Linpha

Rgod · Published 2006-02-15 · Updated 2018-10-19 · CVE-2006-0713

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions LinPHA version 1.0

Description The issue allows remote attackers to include arbitrary files via .. (dot dot) sequences in the lang parameter in "docs/index.php" and the language parameter in "install/install.php", "install/sec stage install.php", "install/third stage install.php", and "install/forth stage install.php". This can lead to direct static code injection, as demonstrated by inserting PHP code into the username, which is then inserted into linpha.log, making it accessible through the directory traversal.

Recommendations For LinPHA version 1.0, consider restricting access to the lang and language parameters in the affected PHP files until a patch is available. As a temporary workaround, avoid using the lang parameter in "docs/index.php" and the language parameter in the install scripts to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2006-0713

Affected Products

Linpha

References · 12

• 🔥 https://exploit-db.com/exploits/27192 · Exploit
• 🔥 https://exploit-db.com/exploits/27195 · Exploit
• 🔥 http://securityfocus.com/bid/16592 · Exploit
• 🔥 https://exploit-db.com/exploits/27193 · Exploit
• 🔥 https://exploit-db.com/exploits/27194 · Exploit
• 🔥 http://retrogod.altervista.org/linpha_10_local.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-0713 · Security Note
• http://secunia.com/advisories/18808 · Vendor Advisory
• http://securityreason.com/securityalert/426 · Note
• http://vupen.com/english/advisories/2006/0535 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24663 · Note
• http://securityfocus.com/archive/1/424729/100/0/threaded · Note