Description
MD News 1 allows remote attackers to bypass authentication via a direct request to a script in the Administration Area.
References
- 24455 vdb-entry
- ADV-2006-1259 vdb-entry
- 17394 vdb-entry
- http://evuln.com/vulns/120/summary.html
- 20060418 [eVuln] MD News Authentication Bypass and SQL Injection Vulnerabilities mailing-list
- mdnews-admin-security-bypass(25636) vdb-entry
- 19530 third-party-advisory