CVE-2001-1468

MODE C CVE-2001-1468 describes a PHP remote file inclusion in phpSecurePages where checklogin.php (and related components) allows arbitrary code execution if an attacker modifies the cfgProgDir parameter to reference a URL on a remote server. Connected advisories reiterate a code-execution vulner...

CVE-2005-2251

CVE-2005-2251 documents a PHP remote file inclusion vulnerability in phpSecurePages (PHPSecurePages/phpSP) 0.28beta and earlier. The issue is triggered via the cfgProgDir parameter, allowing a remote attacker to include code from a URL on a remote Web server and execute arbitrary PHP, a variant o...