VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 2, 2005· Updated Jun 16, 2026

CVE-2005-3434

CVE-2005-3434

Description

Archilles Newsworld before 1.5.0-rc1 stores (1) account.nwd and (2) session.nwd under the web root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames, hashed passwords, and session IDs, and gain privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Archilles/Newsworld4 versions
    cpe:2.3:a:archilles:newsworld:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:archilles:newsworld:*:*:*:*:*:*:*:*range: <=1.5.0_rc1
    • cpe:2.3:a:archilles:newsworld:1.3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:archilles:newsworld:1.3.2:*:*:*:*:*:*:*
    • (no CPE)range: <1.5.0-rc1

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.