CVE-2005-3435 admin_news.php in Archilles Newsworld up to 1.3.0 allows attackers to bypass authentication by obtaining the password hash for another user, for example through another Newsworld vulnerability, and sp...
CriticalCVSS 9.8
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
admin_news.php in Archilles Newsworld up to 1.3.0 allows attackers to bypass authentication by obtaining the password hash for another user, for example through another Newsworld vulnerability, and specifying the hash in the pwd argument.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| archilles newsworld | <= 1.3.0 | No fix listed |
References
- 20051021 aRCHILLES Newsworld < 1.5.0-rc1 Multiple Vulnerabilities mailing-list
- 17310 broken-link third-party-advisory vendor-advisory
- newsworld-adminnews-bypass-authentication(22860) third-party-advisory vdb-entry