Vulnerability Database

299,749

Total vulnerabilities in the database

CVE-2001-1468

PHP remote file inclusion vulnerability in checklogin.php in phpSecurePages 0.24 and earlier allows remote attackers to execute arbitrary PHP code by modifying the cfgProgDir parameter to reference a URL on a remote web server that contains the code.

  • Published: Feb 7, 2001
  • Updated: Nov 9, 2025
  • CVE: CVE-2001-1468
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
secure_reality / phpsecurepages 0.22_beta 0.22_beta.x
secure_reality / phpsecurepages 0.17_beta 0.17_beta.x
secure_reality / phpsecurepages 0.16_beta 0.16_beta.x
secure_reality / phpsecurepages 0.13_beta 0.13_beta.x
secure_reality / phpsecurepages 0.12_beta 0.12_beta.x
secure_reality / phpsecurepages 0.19_beta 0.19_beta.x
secure_reality / phpsecurepages 0.23_beta 0.23_beta.x
secure_reality / phpsecurepages 0.18_beta 0.18_beta.x
secure_reality / phpsecurepages 0.11_beta 0.11_beta.x
secure_reality / phpsecurepages 0.21_beta 0.21_beta.x
secure_reality / phpsecurepages 0.20_beta 0.20_beta.x
secure_reality / phpsecurepages 0.24_beta 0.24_beta.x
secure_reality / phpsecurepages 0.14_beta 0.14_beta.x
secure_reality / phpsecurepages 0.15_beta 0.15_beta.x