CVE-2002-1800: Phprank

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

phpRank 1.8 stores the administrative password in plaintext on the server and in the "ap" cookie, which allows remote attackers to retrieve the administrative password.

Affected products

• Phprank Phprank: version 1.8 only

Published 2002-12-31. Last modified 2026-06-16.