CVE-2005-2251

Published: Jul 13, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

PHP remote file inclusion vulnerability in secure.php in PHPSecurePages (phpSP) 0.28beta and earlier allows remote attackers to execute arbitrary code via the cfgProgDir parameter, a variant of CVE-2001-1468.

Affected (18)

Products: Secure Reality: Phpsecurepages

Secure Reality

1 product

Phpsecurepages

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Secure Reality Phpsecurepages	Version 0.11_beta
Secure Reality Phpsecurepages	Version 0.12_beta
Secure Reality Phpsecurepages	Version 0.13_beta
Secure Reality Phpsecurepages	Version 0.14_beta
Secure Reality Phpsecurepages	Version 0.15_beta
Secure Reality Phpsecurepages	Version 0.16_beta
Secure Reality Phpsecurepages	Version 0.17_beta
Secure Reality Phpsecurepages	Version 0.18_beta
Secure Reality Phpsecurepages	Version 0.19_beta
Secure Reality Phpsecurepages	Version 0.20_beta
Secure Reality Phpsecurepages	Version 0.21_beta
Secure Reality Phpsecurepages	Version 0.22_beta
Secure Reality Phpsecurepages	Version 0.23_beta
Secure Reality Phpsecurepages	Version 0.24_beta
Secure Reality Phpsecurepages	Version 0.25_beta
Secure Reality Phpsecurepages	Version 0.26_beta
Secure Reality Phpsecurepages	Version 0.27_beta
Secure Reality Phpsecurepages	Version 0.28_beta