Back
CVE-2005-2251
PHP remote file inclusion vulnerability in secure.php in PHPSecurePages (phpSP) 0.28beta and earlier allows remote attackers to execute arbitrary code via the cfgProgDir parameter, a variant of CVE-2001-1468.
Published: Jul 13, 2005
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (18)
| Vendor | Product | Version |
|---|---|---|
| secure_reality | phpsecurepages | 0.11_beta |
| secure_reality | phpsecurepages | 0.12_beta |
| secure_reality | phpsecurepages | 0.13_beta |
| secure_reality | phpsecurepages | 0.14_beta |
| secure_reality | phpsecurepages | 0.15_beta |
| secure_reality | phpsecurepages | 0.16_beta |
| secure_reality | phpsecurepages | 0.17_beta |
| secure_reality | phpsecurepages | 0.18_beta |
| secure_reality | phpsecurepages | 0.19_beta |
| secure_reality | phpsecurepages | 0.20_beta |
| secure_reality | phpsecurepages | 0.21_beta |
| secure_reality | phpsecurepages | 0.22_beta |
| secure_reality | phpsecurepages | 0.23_beta |
| secure_reality | phpsecurepages | 0.24_beta |
| secure_reality | phpsecurepages | 0.25_beta |
| secure_reality | phpsecurepages | 0.26_beta |
| secure_reality | phpsecurepages | 0.27_beta |
| secure_reality | phpsecurepages | 0.28_beta |
GitHub Security Advisory GHSA-m7vf-xmj4-6gm7
PHP remote file inclusion vulnerability in secure.php in PHPSecurePages (phpSP) 0.28beta and...
References (10)
- http://secunia.com/advisories/15994
- http://securitytracker.com/id?1014410 Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/14201
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29263
- https://www.exploit-db.com/exploits/2452
- http://secunia.com/advisories/15994
- http://securitytracker.com/id?1014410 Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/14201
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29263
- https://www.exploit-db.com/exploits/2452
Risk Scores
CVSS Score
7.5 / 10
EPSS Score
4.94%
Top 9% most likely to be exploited
Threat Score
31.5 / 100
Data Sources
NVD
EPSS
GitHub