CVE-2004-2689

CVE-2004-2689 describes a critical authentication bypass vulnerability in NewsPHP, allowing remote attackers to gain full administrative access. By manipulating a cookie value to "autorized=admin; root=admin", an unauthenticated attacker can achieve complete compromise of the affected system. This vulnerability carries a CVSS score of 10.0, indicating maximum severity with no authentication required, low attack complexity, and complete confidentiality, integrity, and availability impact. Despite its age and severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.