CVE:CVE-2008-1911
CNNVD:CNNVD-200804-330
1024 CMS 1.4.2 beta 及其早期版本中的includes/system.php中存在SQL注入漏洞，当在magic_quotes_gpc没被激活时，远程攻击者通过一个cookpass cookie来执行任意SQL命令。
solution:Upgrade 1024_cms 1024_cms to a higher version than 1.4.2,and avoid the version 1.4.2