NewsPHP allows remote malicious users to gain unauthorized administrative access by setting a cookie to the "autorized=admin; root=admin" value.
newsphp newsphp