CVE-2002-2218 CRLF injection vulnerability in the setUserValue function in sipssys/code/site.inc.php in Haakon Nilsen simple, integrated publishing system (SIPS) before 20020209 has unknown impact, possibly gaining...
HighCVSS 10.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CRLF injection vulnerability in the setUserValue function in sipssys/code/site.inc.php in Haakon Nilsen simple, integrated publishing system (SIPS) before 20020209 has unknown impact, possibly gaining privileges or modifying critical configuration, via a CRLF sequence in a key value.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sips | All versions | No fix listed |