Vulnerability Database

299,749

Total vulnerabilities in the database

CVE-2002-0267

preferences.php in Simple Internet Publishing System (SIPS) before 0.3.1 allows remote attackers to gain administrative privileges via a linebreak in the "theme" field followed by the Status::admin command, which causes the Status line to be entered into the password file.

  • Published: May 29, 2002
  • Updated: Nov 9, 2025
  • CVE: CVE-2002-0267
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 10
  • AV:N/AC:L/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Software From Fixed in
sips / sips 0.3.0pl1 0.3.0pl1.x
sips / sips 0.3.0pl2 0.3.0pl2.x
sips / sips 0.2.4 0.2.4.x
sips / sips 0.3.0 0.3.0.x