Vulnerability in Sips

CVE-2002-2218

CRLF injection vulnerability in the setUserValue function in sipssys/code/site.inc.php in Haakon Nilsen simple, integrated publishing system (SIPS) before 20020209 has unknown impact, possibly gaining privileges or modifying critical configuration, via a CRLF sequence in a key value.

EPSS: 0.014 (68.7th percentile) — read the EPSS interpretation.

Affected products

  • Sips
  • N/a — versions n/a

References