MD News 1 allows remote attackers to bypass authentication via a direct request to a script in the Administration Area.
NVD-CWE-Other