LinPHA 0.9.x/1.0 install.php language Parameter Local File Inclusion

2006-02-11T00:00:00
ID EDB-ID:27193
Type exploitdb
Reporter rgod
Modified 2006-02-11T00:00:00

Description

LinPHA 0.9.x/1.0 install.php language Parameter Local File Inclusion. CVE-2006-0713. Webapps exploit for php platform

                                        
                                            source: http://www.securityfocus.com/bid/16592/info
 
LinPHA is prone to multiple local file-inclusion and PHP code-injection vulnerabilities. The local file-inclusion issues are due to insecure use of the 'include_once()' PHP function in multiple scripts. The PHP code-injection vulnerabilities are due to insufficient input validation of data that is saved to log files.
 
This will permit an attacker to influence the include path to point to files that are hosted on the computer that is running the affected application. In this manner, files that are readable by the webserver process may be output to the attacker.
 
Attackers may also inject arbitrary PHP code into the log files and cause it to be interpreted. This would occur in the context of the server hosting the application.

http://www.example.com/[path]/install/install.php?language=/../../../../../../../test