CVE-2004-2066: Linpha

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

SQL injection vulnerability in session.php in LinPHA 0.9.4 allows remote attackers to execute arbitrary SQL code and bypass authentication via the (1) linpha_userid or (2) linpha_password cookies.

Affected products

• Linpha Linpha: version 0.9.0 only; version 0.9.1 only; version 0.9.2 only; version 0.9.3 only; version 0.9.4 only

Published 2004-07-29. Last modified 2026-06-16.