CVE-2002-2218: Sips

High severity, CVSS 10.0. EPSS: 1.4% chance of exploitation in the next 30 days.

CRLF injection vulnerability in the setUserValue function in sipssys/code/site.inc.php in Haakon Nilsen simple, integrated publishing system (SIPS) before 20020209 has unknown impact, possibly gaining privileges or modifying critical configuration, via a CRLF sequence in a key value.

Affected products

• Sips Sips: any version

Published 2002-12-31. Last modified 2026-06-16.