cpLinks version 1.03 suffers from login bypass, SQL injection, and cross site scripting vulnerabilities.