Critical severity9.8NVD Advisory· Published Nov 2, 2005· Updated Jun 16, 2026

CVE-2005-3435

Description

admin_news.php in Archilles Newsworld up to 1.3.0 allows attackers to bypass authentication by obtaining the password hash for another user, for example through another Newsworld vulnerability, and specifying the hash in the pwd argument.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Archilles/Newsworld2 versions
cpe:2.3:a:archilles:newsworld:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:archilles:newsworld:*:*:*:*:*:*:*:*range: <=1.3.0
- (no CPE)range: <=1.3.0

Patches

Vulnerability mechanics

References

secunia.com/advisories/17310/nvdBroken LinkVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/22860nvdThird Party AdvisoryVDB Entry
marc.infonvdMailing List

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000