Vulnerability in Secure Reality Phpsecurepages

CVE-2001-1468

PHP remote file inclusion vulnerability in checklogin.php in phpSecurePages 0.24 and earlier allows remote attackers to execute arbitrary PHP code by modifying the cfgProgDir parameter to reference a URL on a remote web server that contains the code.

EPSS: 0.019 (77.0th percentile) — read the EPSS interpretation.

Affected products

Secure_reality Phpsecurepages — versions 0.11_beta, 0.12_beta, 0.13_beta
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_XF)