← Back

Md News

md_news

Vendor: Matthew Dingley • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2006-1756
1Matthew Dingley
1Md News
Apr 16, 2026
Apr 13, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
MD News 1 allows remote attackers to bypass authentication via a direct request to a script in the Administration Area.
CVE-2006-1755
1Matthew Dingley
1Md News
Apr 16, 2026
Apr 13, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in admin.php in MD News 1 allows remote attackers to execute arbitrary SQL commands via the id parameter.