CVE-2002-0589

CVE-2002-0589 describes a critical vulnerability in PVote versions prior to 1.9, allowing remote attackers to bypass authentication and change the administrative password. This is achieved by directly accessing the ch_info.php script and providing new password values, effectively granting unauthorized administrative privileges. With a CVSS score of 7.5 (High) and a FAUCET Risk Score of 91/100, the vulnerability is easily exploitable over the network with low attack complexity, leading to potential compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog or having significant community discussion, public exploit code is available on ExploitDB, indicating a clear path for exploitation.