CVE-2002-1919

CVE-2002-1919 describes an SQL injection vulnerability in the shopadmin.asp component of VP-ASP 4.0. This flaw allows unauthenticated remote attackers to execute arbitrary SQL commands and bypass authentication by manipulating the username or password fields. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While no active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion has been identified, the vulnerability's age and the lack of readily available exploit intelligence suggest it is not a current high-profile threat.