Description
PHP remote file inclusion vulnerability in checklogin.php in phpSecurePages 0.24 and earlier allows remote attackers to execute arbitrary PHP code by modifying the cfgProgDir parameter to reference a URL on a remote web server that contains the code.
References
- 1001408 vdb-entry
- VU#391347 third-party-advisory
- 2970 vdb-entry
- phpsecurepages-checklogin-execute-code(6774) vdb-entry