CVE-2005-2251

PHP remote file inclusion vulnerability in secure.php in PHPSecurePages (phpSP) 0.28beta and earlier allows remote attackers to execute arbitrary code via the cfgProgDir parameter, a variant of CVE-2001-1468.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2005-07-13

Last modified

2024-08-07

Affected products

• Phpsecurepages (Secure Reality)

References

• http://secunia.com/advisories/15994
• http://securitytracker.com/id?1014410
• http://www.securityfocus.com/bid/14201
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29263
• https://www.exploit-db.com/exploits/2452