Description
PHP remote file inclusion vulnerability in secure.php in PHPSecurePages (phpSP) 0.28beta and earlier allows remote attackers to execute arbitrary code via the cfgProgDir parameter, a variant of CVE-2001-1468.
References
- phpsecurepages-secure-file-include(29263) vdb-entry
- 15994 third-party-advisory
- 1014410 vdb-entry
- 2452 exploit
- 14201 vdb-entry