CVE-2002-0286

CVE-2002-0286 describes a privilege escalation vulnerability in SiteNews versions 0.10 and 0.11. Attackers can exploit a flaw in the GetPassword function by providing a non-existent username and an MD5 hash for an empty password to add_user.php, leading to the creation of new user accounts with elevated privileges. This vulnerability carries a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low complexity, and potential for partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.