Unrated severityNVD Advisory· Published Jan 9, 2009· Updated Jun 16, 2026
CVE-2009-0109
CVE-2009-0109
Description
SQL injection vulnerability in index.php in RiotPix 0.61 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: some of these details are obtained from third party information.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7cpe:2.3:a:riotpix:riotpix:*:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:riotpix:riotpix:*:*:*:*:*:*:*:*range: <=0.61
- cpe:2.3:a:riotpix:riotpix:.05:*:*:*:*:*:*:*
- cpe:2.3:a:riotpix:riotpix:0.5:*:*:*:*:*:*:*
- cpe:2.3:a:riotpix:riotpix:0.51:beta:*:*:*:*:*:*
- cpe:2.3:a:riotpix:riotpix:0.52:*:*:*:*:*:*:*
- cpe:2.3:a:riotpix:riotpix:0.60:*:*:*:*:*:*:*
- (no CPE)range: <=0.61
Patches
Vulnerability mechanics
References
4- www.securityfocus.com/bid/33132nvdExploit
- secunia.com/advisories/33395nvdVendor Advisory
- securityreason.com/securityalert/4892nvd
- www.exploit-db.com/exploits/7682nvd
News mentions
0No linked articles in our index yet.