CVE-2002-0537

CVE-2002-0537 describes a critical vulnerability in StepWeb Search Engine (SWS) 2.5, where the admin.html file insecurely stores passwords within links to manager.pl. This flaw allows any remote attacker who can access admin.html to gain full administrative privileges to the SWS application. With a CVSS score of 10.0, this vulnerability is considered extremely severe due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its critical severity, there is no evidence of active exploitation, publicly available exploit code in common databases like Metasploit or ExploitDB, or significant community discussion surrounding this CVE.