Vulnerability in Secure Reality Phpsecurepages

CVE-2005-2251

PHP remote file inclusion vulnerability in secure.php in PHPSecurePages (phpSP) 0.28beta and earlier allows remote attackers to execute arbitrary code via the cfgProgDir parameter, a variant of CVE-2001-1468.

EPSS: 0.049 (91.2th percentile) — read the EPSS interpretation.

Affected products

Secure_reality Phpsecurepages — versions 0.11_beta, 0.12_beta, 0.13_beta
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
cve@mitre.org (Exploit, vdb-entry, x_refsource_SECTRACK, Vendor Advisory)
cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
cve@mitre.org (vdb-entry, x_refsource_BID)