CVE-2002-1757

CVE-2002-1757 describes an authentication bypass vulnerability affecting PHProjekt versions 2.0 through 3.1. The flaw stems from the application's reliance on the $PHP_SELF variable for authentication, which can be manipulated by remote attackers. By appending "sms" to the PATH_INFO portion of the URL when requesting a .php file, attackers can bypass authentication. This vulnerability carries a CVSS score of 7.5 (High), indicating a critical risk. It can be exploited remotely with low attack complexity and without requiring authentication, potentially leading to partial compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation in the wild or inclusion in the CISA KEV catalog, an exploit module for this vulnerability is available on ExploitDB. Despite its age, the high FAUCET Risk Score of 90/100 suggests its potential impact. There is minimal community discussion or media coverage surrounding this CVE.