Unrated severityNVD Advisory· Published Apr 9, 2009· Updated Jun 16, 2026
CVE-2009-1282
CVE-2009-1282
Description
SQL injection vulnerability in private/system/lib-session.php in glFusion 1.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the glf_session cookie parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
9cpe:2.3:a:glfusion:glfusion:*:*:*:*:*:*:*:*+ 8 more
- cpe:2.3:a:glfusion:glfusion:*:*:*:*:*:*:*:*range: <=1.1.2
- cpe:2.3:a:glfusion:glfusion:1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:glfusion:glfusion:1.0.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:glfusion:glfusion:1.0.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:glfusion:glfusion:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:glfusion:glfusion:1.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:glfusion:glfusion:1.1.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:glfusion:glfusion:1.1.1:*:*:*:*:*:*:*
- (no CPE)range: <=1.1.2
Patches
Vulnerability mechanics
References
8- www.glfusion.org/wiki/doku.phpnvdPatchVendor Advisory
- marc.infonvdExploit
- retrogod.altervista.org/9sg_glfuso_sql_cookies.htmlnvdExploit
- www.securityfocus.com/bid/34361nvdExploitPatch
- secunia.com/advisories/34575nvdVendor Advisory
- osvdb.org/53286nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/49652nvd
- www.exploit-db.com/exploits/8347nvd
News mentions
0No linked articles in our index yet.