What’s Vulnerable › Vulnerabilities

CVE-2005-3435

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2005-11-02 · updated 2026-06-16
• Weakness: CWE-522

Description

admin_news.php in Archilles Newsworld up to 1.3.0 allows attackers to bypass authentication by obtaining the password hash for another user, for example through another Newsworld vulnerability, and specifying the hash in the pwd argument.

Affected products

• Archilles Newsworld: through 1.3.0

References

• http://marc.info/?l=bugtraq&m=113018731120709&w=2
• http://secunia.com/advisories/17310/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22860
• http://marc.info/?l=bugtraq&m=113018731120709&w=2
• http://secunia.com/advisories/17310/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22860

Get alerted when CVE-2005-3435 or the next vulnerability affects your stack