The web interface on tcp port 8090 of IPsession suffers from a SQL injection vulnerability.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/77720/DDIVRT-2009-25.txt
Source: https://packetstormsecurity.com/files/77720/Digital-Defense-VRT-Advisory-2009.25.html