CVE-2006-0713

The provided text describes multiple local file-inclusion and PHP code-injection vulnerabilities in LinPHA due to insecure use of 'include_once()' and insufficient input validation. It includes example URLs demonstrating the exploitation vectors but lacks actual exploit code.

The provided text describes multiple vulnerabilities in LinPHA, including local file inclusion and PHP code injection via insecure use of 'include_once()' and insufficient input validation in log files. It outlines how an attacker can exploit these to read arbitrary files or execute PHP code in the context of the web server.

The exploit describes multiple local file-inclusion and PHP code-injection vulnerabilities in LinPHA due to insecure use of 'include_once()' and insufficient input validation. It provides a proof-of-concept URL to demonstrate the file-inclusion vulnerability.

This exploit demonstrates a local file inclusion vulnerability in LinPHA by manipulating the 'language' parameter in a POST request to traverse directories and include arbitrary files. It also highlights PHP code injection via log files due to insufficient input validation.