CVE-2002-1910

HIGH

Click2Learn Ingenium Learning Management System 5.1 and 6.1 - Inadequate Encryption Strength

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2002-1910. PoCs published by Brian Enigma.

AI-analyzed exploit summary This Java program decodes weakly hashed passwords used by Ingenium Learning Management System by reversing a Caesar cipher with a rotating key. It requires access to the hashed password from the config.txt file, which may be obtained via another vulnerability (e.g., directory traversal).

Description

Click2Learn Ingenium Learning Management System 5.1 and 6.1 uses weak encryption for passwords (reversible algorithm), which allows attackers to obtain passwords.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Brian Enigma · javaremotemultiple
https://www.exploit-db.com/exploits/21942

This Java program decodes weakly hashed passwords used by Ingenium Learning Management System by reversing a Caesar cipher with a rotating key. It requires access to the hashed password from the config.txt file, which may be obtained via another vulnerability (e.g., directory traversal).

Classification
Working Poc 100%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target: Ingenium Learning Management System
No auth needed
Prerequisites: Access to the hashed password (e.g., via config.txt file) · Knowledge of the weak hashing algorithm
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (3)

Core 3
Core References
Broken Link, Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://online.securityfocus.com/archive/1/295309
Broken Link vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/10389.php
Broken Link, Exploit, Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/5970

Scores

CVSS v3 7.5
EPSS 0.0341
EPSS Percentile 87.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-326
Status published
Products (2)
click-2/ingenium_learning_management_system 5.1
click-2/ingenium_learning_management_system 6.1
Published Dec 31, 2002
Tracked Since Feb 18, 2026