Authentication flaw

MD News 1 allows remote attackers to bypass authentication via a direct request to a script in the Administration Area...

CVE-2006-1755

SQL injection vulnerability in admin.php in MD News 1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-1756

MD News 1 allows remote attackers to bypass authentication via a direct request to a script in the Administration Area...

CVE-2006-1755

MD News 1 admin.php is affected by an SQL injection in the id parameter that allows remote attackers to run arbitrary SQL. Root cause: improper handling of input leading to SQL injection. Impact: potential unauthorized data exposure or modification; exploitation is remote over the network with lo...

CVE-2006-1756

MD News 1 allows remote attackers to bypass authentication via a direct request to a script in the Administration Area...

CVE-2006-1755

SQL injection vulnerability in admin.php in MD News 1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-1756

MD News 1 is affected by CVE-2006-1756: remote attackers can bypass authentication via a direct request to a script in the Administration Area. The vulnerability enables auth bypass, with CVSS v2.0 base metrics: 7.5 (HIGH) with Network attack vector, Low complexity, no user interaction. Impact de...

CVE-2006-1755: Undefined Security Weakness

SQL injection vulnerability in admin.php in MD News 1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-1756: Undefined Security Weakness

MD News 1 allows remote attackers to bypass authentication via a direct request to a script in the Administration Area...