Approved changes feed: RSS · Atom
cpe:2.3:a:linpha:linpha:0.9.1:*:*:*:*:*:*:*part: a version: 0.9.1 update: *
| Vendor | Linpha (5bf074b8-a9ae-5cdd-bc2b-d08d2182ee9a) |
|---|---|
| Product | Linpha (2dae6f23-6ca0-5be6-b90d-202db4bbc337) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/surenjie/linpha-1.3.5 |
purl2cpe | 2026-06-01 10:16:59.590695 |
pkg:sourceforge/linpha |
purl2cpe | 2026-06-01 10:16:59.590697 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-7223 |
vulnerable | 2026-06-08 04:51:06.014652 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via (1) ftp/index.php, (2) viewer.php, (3) functions/other.php, (4) include/left_menu.class.php, or (5) plugins/stats/stats_view.php.
Published: 2009-09-14T14:00:00.000Z
Updated: 2024-09-16T18:09:17.707Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-6571 |
vulnerable | 2026-06-08 04:50:55.442435 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.3.4 might allow remote attackers to inject arbitrary web script or HTML via (1) new_images.php, (2) login.php, and unspecified vectors.
Published: 2009-03-31T17:00:00.000Z
Updated: 2024-09-17T00:50:45.215Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-1856 |
vulnerable | 2026-06-08 04:50:22.113693 |
Details available
plugins/maps/db_handler.php in LinPHA 1.3.3 and earlier does not require authentication for a settings action that modifies the configuration file, which allows remote attackers to conduct directory traversal attacks and execute arbitrary local files by placing directory traversal sequences into the maps_type configuration setting, and then sending a request to maps_view.php, which causes plugins/maps/map.main.class.php to use the modified configuration.
Published: 2008-04-16T19:00:00.000Z
Updated: 2024-08-07T08:40:59.408Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0713 |
vulnerable | 2026-06-08 04:48:55.027704 |
Details available
Directory traversal vulnerability in LinPHA 1.0 allows remote attackers to include arbitrary files via .. (dot dot) sequences in the (1) lang parameter in docs/index.php and the language parameter in (2) install/install.php, (3) install/sec_stage_install.php, (4) install/third_stage_install.php, and (5) install/forth_stage_install.php. NOTE: direct static code injection is resultant from this issue, as demonstrated by inserting PHP code into the username, which is inserted into linpha.log, which is accessible from the directory traversal.
Published: 2006-02-15T11:00:00.000Z
Updated: 2024-08-07T16:48:55.267Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-2066 |
vulnerable | 2026-06-08 04:48:08.450381 |
Details available
SQL injection vulnerability in session.php in LinPHA 0.9.4 allows remote attackers to execute arbitrary SQL code and bypass authentication via the (1) linpha_userid or (2) linpha_password cookies.
Published: 2005-05-10T04:00:00.000Z
Updated: 2024-08-08T01:15:01.575Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.