← All advisories

Unrated severityNVD Advisory· Published Dec 31, 2004· Updated Jun 16, 2026

CVE-2004-2689

CVE-2004-2689

Description

NewsPHP allows remote attackers to gain unauthorized administrative access by setting a cookie to the "autorized=admin; root=admin" value.

Affected products

2

Newsphp/Newsphp2 versions
cpe:2.3:a:newsphp:newsphp:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:newsphp:newsphp:*:*:*:*:*:*:*:*
- (no CPE)

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.