Vulnerabilities > Linpha > High
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2007-07-30 | CVE-2007-4053 | SQL Injection vulnerability in LinPHA New_images.PHP SQL injection vulnerability in include/img_view.class.php in LinPHA 1.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the order parameter to new_images.php. | 7.5 |
2004-07-29 | CVE-2004-2066 | SQL Injection vulnerability in LinPHA Session Cookie SQL injection vulnerability in session.php in LinPHA 0.9.4 allows remote attackers to execute arbitrary SQL code and bypass authentication via the (1) linpha_userid or (2) linpha_password cookies. | 7.5 |