CVE-2002-2074

CVE-2002-2074 describes a critical SQL injection vulnerability in Mailidx versions prior to 20020105, specifically affecting the erwin_lansing mailidx product. This flaw allows unauthenticated remote attackers to execute arbitrary SQL commands through the search web page. With a CVSS score of 7.5, it presents a high risk due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, public exploit code, or Metasploit modules, the vulnerability has garnered significant community discussion with 10 mentions, indicating awareness among security researchers.