CVE-2005-3435: Archilles Newsworld

Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days.

admin_news.php in Archilles Newsworld up to 1.3.0 allows attackers to bypass authentication by obtaining the password hash for another user, for example through another Newsworld vulnerability, and specifying the hash in the pwd argument.

Affected products

• Archilles Newsworld: up to and including 1.3.0

Published 2005-11-02. Last modified 2026-06-16.