critical10.0
CVE-2002-2218
CRLF injection vulnerability in the setUserValue function in sipssys/code/site.inc.php in Haakon Nilsen simple, integrated publishing system (SIPS) before 2002…
Impact
CRLF injection vulnerability in the setUserValue function in sipssys/code/site.inc.php in Haakon Nilsen simple, integrated publishing system (SIPS) before 20020209 has unknown impact, possibly gaining privileges or modifying critical configuration, via a CRLF sequence in a key value.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sips | Sips | All versions |
References
- NVD record
- CVE.org record
- http://sips.cvs.sourceforge.net/sips/sips/sipssys/code/site.inc.php?r1=1.13&r2=1.14
- http://sips.cvs.sourceforge.net/sips/sips/sipssys/code/site.inc.php?view=log
- http://sips.cvs.sourceforge.net/sips/sips/sipssys/code/site.inc.php?r1=1.13&r2=1.14
- http://sips.cvs.sourceforge.net/sips/sips/sipssys/code/site.inc.php?view=log