CVE-2002-0267: Sips

High severity, CVSS 10.0. EPSS: 2.6% chance of exploitation in the next 30 days.

preferences.php in Simple Internet Publishing System (SIPS) before 0.3.1 allows remote attackers to gain administrative privileges via a linebreak in the "theme" field followed by the Status::admin command, which causes the Status line to be entered into the password file.

Affected products

• Sips Sips: version 0.2.4 only; version 0.3.0 only; version 0.3.0pl1 only; version 0.3.0pl2 only

Published 2002-05-29. Last modified 2026-06-16.