Skip to content

CVE-2003-0754

nphpd.php in newsPHP 216 and earlier allows remote attackers to bypass authentication via an HTTP...

7.5 High

CVE-2003-0754 is a high vulnerability (CVSS 7.5) in Newsphp, published September 6, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.29%, the 83rd percentile. No source names a fixed version.

nphpd.php in newsPHP 216 and earlier allows remote attackers to bypass authentication via an HTTP request with a modified nphp_users array, which is used for authentication.

Exploit likelihood

2.29%Up 1.2 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

nphpd.php in newsPHP 216 and earlier allows remote attackers to bypass authentication via an HTTP request with a modified nphp_users array, which is used for authentication.

Record: CVE-2003-0754
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

nphpd.php in newsPHP 216 and earlier allows remote attackers to bypass authentication via an HTTP request with a modified nphp_users array, which is used for authentication.

Record: CVE-2003-0754
Updated: 2026-11-02

EUVDEUVD-2003-0745 No score

nphpd.php in newsPHP 216 and earlier allows remote attackers to bypass authentication via an HTTP request with a modified nphp_users array, which is used for authentication.

Record: EUVD-2003-0745
Updated: 2026-11-03

GitHub AdvisoriesGHSA-734q-j98p-2ffh No score

nphpd.php in newsPHP 216 and earlier allows remote attackers to bypass authentication via an HTTP...

nphpd.php in newsPHP 216 and earlier allows remote attackers to bypass authentication via an HTTP request with a modified nphp_users array, which is used for authentication.

Record: GHSA-734q-j98p-2ffh
Updated: 2026-11-02

Affected products

newsphp

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD

References