CVE-2008-1911

The CVE-2008-1911 entry concerns a SQL injection in 1024 CMS (version 1.4.2 beta and earlier) inside includes/system.php. The root cause is the vulnerability being exploitable when magic_quotes_gpc is disabled, allowing remote attackers to inject and execute arbitrary SQL via a cookpass cookie. I...