CVE-2005-3434

CVE-2005-3434 affects Archilles Newsworld prior to 1.5.0-rc1. The vulnerability arises from storing (1) account.nwd and (2) session.nwd under the web root with insufficient access control, enabling remote attackers to obtain sensitive information such as usernames, hashed passwords, and session I...