CVE-2003-0754

nphpd.php in newsPHP 216 and earlier allows remote attackers to bypass authentication via an HTTP request with a modified nphpusers array, which is used for authentication...

CVE-2003-0754

CVE-2003-0754 concerns nphpd.php in newsPHP 216 and earlier where remote attackers can bypass authentication by sending an HTTP request that uses a modified nphp_users array. The root cause is insufficient validation of the authentication data, allowing an attacker-controlled user list to grant a...