CVE-2006-1276

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-03-19 · updated 2026-06-16

Description

admin.php in Himpfen Consulting Company PHP SimpleNEWS 1.0.0 allows remote attackers to bypass authentication by setting the admin parameter in a cookie.

Affected products

Himpfen Consulting Php Simplenews: through 1.0.0

References

http://evuln.com/vulns/94/summary.html
http://secunia.com/advisories/19195
http://securityreason.com/securityalert/613
http://www.osvdb.org/23803
http://www.securityfocus.com/archive/1/428427
http://www.securityfocus.com/bid/17186
http://www.vupen.com/english/advisories/2006/0913
https://exchange.xforce.ibmcloud.com/vulnerabilities/25177
http://evuln.com/vulns/94/summary.html
http://secunia.com/advisories/19195
http://securityreason.com/securityalert/613
http://www.osvdb.org/23803

Get alerted when CVE-2006-1276 or the next vulnerability affects your stack