CVE-2006-1276: Himpfen Consulting PHP Simplenews

High severity, CVSS 10.0. EPSS: 3.6% chance of exploitation in the next 30 days.

admin.php in Himpfen Consulting Company PHP SimpleNEWS 1.0.0 allows remote attackers to bypass authentication by setting the admin parameter in a cookie.

Affected products

• Himpfen Consulting PHP Simplenews: up to and including 1.0.0

Published 2006-03-19. Last modified 2026-06-16.