CVE-2002-1952

CVE-2002-1952 describes a vulnerability in phpRank 1.8 where the application fails to properly validate MySQL operation return codes during user authentication. This flaw allows remote attackers to bypass authentication using a NULL password, particularly when database errors occur or the database is unavailable. With a CVSS score of 7.5, this vulnerability is considered highly severe, enabling full compromise of confidentiality, integrity, and availability with low attack complexity and no authentication required. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.