VULNERABILITY INTELLIGENCE

CVE-2005-3435

CVSS score9.8 CRITICAL

EPSS probability2.33%

CISA KEVNot currently listed

Published2005-11-02

Last modified2026-06-16

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

admin_news.php in Archilles Newsworld up to 1.3.0 allows attackers to bypass authentication by obtaining the password hash for another user, for example through another Newsworld vulnerability, and specifying the hash in the pwd argument.

Weakness classification

CWE-522: Insufficiently Protected Credentials

Primary references

cve@mitre.org — Mailing List
cve@mitre.org — Broken Link, Vendor Advisory
cve@mitre.org — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Mailing List
af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry