CVE-2005-3435

Critical

Published: 02/11/2005(UTC)Translated: 30/05/2026(UTC)NVD NIST

Summary

The vulnerability in admin_news.php in Archilles Newsworld up to version 1.3.0 allows attackers to bypass authentication by obtaining the password hash of another user (e.g., through another Newsworld vulnerability) and specifying it in the pwd argument.

Risk Assessment

An attacker can gain unauthorized access to the administrative panel, potentially leading to full control over the application and data confidentiality breaches.

Recommendation

Immediately update Archilles Newsworld to the latest available version that fixes this vulnerability, and implement strong authentication mechanisms based on secure sessions.

Original NVD description (English source)

admin_news.php in Archilles Newsworld up to 1.3.0 allows attackers to bypass authentication by obtaining the password hash for another user, for example through another Newsworld vulnerability, and specifying the hash in the pwd argument.