CVE-2003-0588: Digi-Fx Digi-News

High severity, CVSS 10.0. EPSS: 3.2% chance of exploitation in the next 30 days.

admin.php in Digi-news 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that does not require a correct password.

Affected products

• Digi-Fx Digi-News: version 1.1 only

Published 2003-08-18. Last modified 2026-06-16.