CVE-2002-1952: Phprank

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

phpRank 1.8 does not properly check the return codes for MySQL operations when authenticating users, which could allow remote attackers to authenticate using a NULL password when database errors occur or if the database is unavailable.

Affected products

• Phprank Phprank: version 1.8 only

Published 2002-12-31. Last modified 2026-06-16.