Vulnerabilities

TI-2008-01835 CVE-2008-1911 · GHSA-cwx8-54f9-93jq

SQL injection vulnerability in includes/system.php in 1024 CMS 1.4.2 beta and earlier…

LOW 32

SQL injection vulnerability in includes/system.php in 1024 CMS 1.4.2 beta and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via a cookpass cookie.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00949 Published 2008-04-21 No fix listed CWE-89

TI-2007-06281 CVE-2007-6584 · GHSA-6gqm-f29f-4p3p

Multiple directory traversal vulnerabilities in 1024 CMS 1.3.1 allow remote attackers to…

MEDIUM 40

Multiple directory traversal vulnerabilities in 1024 CMS 1.3.1 allow remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.0856 Published 2007-12-28 No fix listed CWE-22

TI-2007-06280 CVE-2007-6583 · GHSA-w9ff-r3vg-v2x7

SQL injection vulnerability in admin/ops/findip/ajax/search.php in 1024 CMS 1.3.1 allows…

LOW 37

SQL injection vulnerability in admin/ops/findip/ajax/search.php in 1024 CMS 1.3.1 allows remote attackers to execute arbitrary SQL commands via the ip parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01839 Published 2007-12-28 No fix listed CWE-89

Vulnerabilities

Filters

SQL injection vulnerability in includes/system.php in 1024 CMS 1.4.2 beta and earlier…

Multiple directory traversal vulnerabilities in 1024 CMS 1.3.1 allow remote attackers to…

SQL injection vulnerability in admin/ops/findip/ajax/search.php in 1024 CMS 1.3.1 allows…