LinPHA 0.9.x/1.0 - 'sec_stage_install.php' Local File Inclusion

source: https://www.securityfocus.com/bid/16592/info LinPHA is prone to multiple local file-inclusion and PHP code-injection vulnerabilities. The local file-inclusion issues are due to insecure use of the 'includeonce' PHP function in multiple scripts. The PHP code-injection vulnerabilities are d...

CVE-2004-2066

CVE-2004-2066 affects LinPHA 0.9.4, where a flaw in session.php enables SQL injection via the linpha_userid or linpha_password cookies, allowing remote attackers to execute arbitrary SQL and bypass authentication. The vulnerability’s impact is described as partial confidentiality, integrity, and ...

CVE-2004-2066

SQL injection vulnerability in session.php in LinPHA 0.9.4 allows remote attackers to execute arbitrary SQL code and bypass authentication via the 1 linphauserid or 2 linphapassword cookies...

CVE-2004-2066: Undefined Security Weakness

SQL injection vulnerability in session.php in LinPHA 0.9.4 allows remote attackers to execute arbitrary SQL code and bypass authentication via the 1 linphauserid or 2 linphapassword cookies...

Linpha 0.9.4: authentication bypass

///////////////////////////////////////////////////// //// Vulnerable Program: Linpha //// //// Url: http://linpha.sf.net //// //// Version: 0.9.4 Latest version //// //// Date: Today, July 28 of 2004 //// //// Author: Fernando Quintero a.k.a nonroot //// Email: [email protected]...

CVE-2004-2066

SQL injection vulnerability in session.php in LinPHA 0.9.4 allows remote attackers to execute arbitrary SQL code and bypass authentication via the 1 linphauserid or 2 linphapassword cookies...