CVE-2006-0713: Directory traversal vulnerability in LinPHA 1.0 allows remote attackers to include arbitrary files via ..

Security readout for executives and security teams

CVE-2006-0713 affects LinPHA 1.0 and allows a remote attacker to abuse language-related parameters to include files outside the intended directory. The public description also notes a demonstrated path to PHP code execution through data written into linpha.log. There is no KEV listing or bundled source evidence of active exploitation. Exposure is most likely on internet-facing LinPHA 1.0 photo gallery installations, especially where install scripts or docs endpoints remain publicly reachable. The bundle does not identify later affected versions, supported platforms, or CPEs. Prioritize any internet-facing LinPHA 1.0 instance for rapid removal, upgrade, or isolation. The business risk is legacy web compromise, not broad enterprise exposure, but a reachable affected instance could become a foothold. Mitigation focus: Inventory any LinPHA deployments and identify version 1.0 instances.; Check LinPHA/vendor guidance for an upgrade, replacement, or official fix.; Remove or block public access to unused install scripts..

Prepared

Jun 29, 2026, 14:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.