CVE-2009-1282: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in private/system/lib-session.php in glFusion 1.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the glfsession cookie parameter...