LinPHA versions 0.9.4 suffers from SQL injection attacks due to an input validation error in the session.php script.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33926/linpha094.txt
Source: https://packetstormsecurity.com/files/33926/linpha094.txt.html