CVE-2002-0537: Stepweb Sws

High severity, CVSS 10.0. EPSS: 3.1% chance of exploitation in the next 30 days.

The admin.html file in StepWeb Search Engine (SWS) 2.5 stores passwords in links to manager.pl, which allows remote attackers who can access the admin.html file to gain administrative privileges to SWS.

Affected products

• Stepweb Sws: version 2.5 only

Published 2002-07-03. Last modified 2026-06-16.