SQL injection vulnerability in Coppermine Photo Gallery (CPG) before 1.4.11 allows remote attackers to execute arbitrary SQL commands via an album password cookie to an unspecified component.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2007-3542
http://www.securityfocus.com/bid/24710