Unrated severityNVD Advisory· Published Jan 9, 2009· Updated Apr 23, 2026
CVE-2009-0109
CVE-2009-0109
Description
SQL injection vulnerability in index.php in RiotPix 0.61 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: some of these details are obtained from third party information.
Affected products
6cpe:2.3:a:riotpix:riotpix:*:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:riotpix:riotpix:*:*:*:*:*:*:*:*range: <=0.61
- cpe:2.3:a:riotpix:riotpix:.05:*:*:*:*:*:*:*
- cpe:2.3:a:riotpix:riotpix:0.5:*:*:*:*:*:*:*
- cpe:2.3:a:riotpix:riotpix:0.51:beta:*:*:*:*:*:*
- cpe:2.3:a:riotpix:riotpix:0.52:*:*:*:*:*:*:*
- cpe:2.3:a:riotpix:riotpix:0.60:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- www.securityfocus.com/bid/33132nvdExploit
- secunia.com/advisories/33395nvdVendor Advisory
- securityreason.com/securityalert/4892nvd
- www.exploit-db.com/exploits/7682nvd
News mentions
0No linked articles in our index yet.