CVE-2009-2921: Mocdesigns PHP News

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in login.php in MOC Designs PHP News 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) newsuser parameter (User field) and (2) newspassword parameter (Password field).

Affected products

• Mocdesigns PHP News: version 1.1 only

Published 2009-08-21. Last modified 2026-06-16.