CVE-2002-2218

CVE-2002-2218 describes a critical CRLF injection vulnerability in the setUserValue function of Haakon Nilsen's SIPS publishing system, specifically in sipssys/code/site.inc.php, affecting versions prior to 20020209. This flaw allows an unauthenticated attacker to inject CRLF sequences into a key value, potentially leading to privilege escalation or critical configuration modification. With a CVSS score of 10.0, this vulnerability is easily exploitable over the network with no authentication required, posing a complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion with over 10 mentions, indicating awareness despite its age.