Back
CVE-2002-2218
CRLF injection vulnerability in the setUserValue function in sipssys/code/site.inc.php in Haakon Nilsen simple, integrated publishing system (SIPS) before 20020209 has unknown impact, possibly gaining privileges or modifying critical configuration, via a CRLF sequence in a key value.
Published: Dec 31, 2002
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (1)
| Vendor | Product | Version |
|---|---|---|
| sips | sips | * |
GitHub Security Advisory GHSA-62mq-8v6x-7m34
CRLF injection vulnerability in the setUserValue function in sipssys/code/site.inc.php in Haakon...
References (4)
- http://sips.cvs.sourceforge.net/sips/sips/sipssys/code/site.inc.php?r1=1.13&r2=1.14
- http://sips.cvs.sourceforge.net/sips/sips/sipssys/code/site.inc.php?view=log
- http://sips.cvs.sourceforge.net/sips/sips/sipssys/code/site.inc.php?r1=1.13&r2=1.14
- http://sips.cvs.sourceforge.net/sips/sips/sipssys/code/site.inc.php?view=log
Risk Scores
CVSS Score
10.0 / 10
EPSS Score
1.35%
Top 31% most likely to be exploited
Threat Score
40.4 / 100
Data Sources
NVD
EPSS
GitHub