« Volver al listado

CVE-2001-1468

Estado: ModificadaAlta (7.5)—

PHP remote file inclusion vulnerability in checklogin.php in phpSecurePages 0.24 and earlier allows remote attackers to execute arbitrary PHP code by modifying the cfgProgDir parameter to reference a URL on a remote web server that contains the code.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Secure Reality — Phpsecurepages

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2001-1468",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2001-02-07T05:00:00.000",
  "references": [
    {
      "url": "http://securitytracker.com/id?1001408",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/391347",
      "tags": [
        "US Government Resource"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/2970",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/6774",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1001408",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/391347",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/2970",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/6774",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "PHP remote file inclusion vulnerability in checklogin.php in phpSecurePages 0.24 and earlier allows remote attackers to execute arbitrary PHP code by modifying the cfgProgDir parameter to reference a URL on a remote web server that contains the code."
    }
  ],
  "lastModified": "2026-06-16T21:56:20.080",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:secure_reality:phpsecurepages:0.11_beta:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "039E1A02-C2D5-44EE-BF21-5534DE5BF965"
            },
            {
              "criteria": "cpe:2.3:a:secure_reality:phpsecurepages:0.12_beta:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "317871E0-8C5F-4F23-A42E-A7CCC4CC4228"
            },
            {
              "criteria": "cpe:2.3:a:secure_reality:phpsecurepages:0.13_beta:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "725E97D6-D50A-4301-A9CA-84BEE2E01997"
            },
            {
              "criteria": "cpe:2.3:a:secure_reality:phpsecurepages:0.14_beta:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A5514AF7-1F42-43A7-A2C3-21A4B48F316A"
            },
            {
              "criteria": "cpe:2.3:a:secure_reality:phpsecurepages:0.15_beta:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "227194A8-E005-41A4-A31F-275B401141C6"
            },
            {
              "criteria": "cpe:2.3:a:secure_reality:phpsecurepages:0.16_beta:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3CF7AC7E-1DCD-40D1-818E-BBD8701988E7"
            },
            {
              "criteria": "cpe:2.3:a:secure_reality:phpsecurepages:0.17_beta:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "80661A8D-D2A7-4CE5-A1C0-6B07E9C47751"
            },
            {
              "criteria": "cpe:2.3:a:secure_reality:phpsecurepages:0.18_beta:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3DDBE8FF-3A12-4EAE-BC01-F79BE6E1941E"
            },
            {
              "criteria": "cpe:2.3:a:secure_reality:phpsecurepages:0.19_beta:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A40AC697-4EC4-4286-A53C-6B9BD1676B26"
            },
            {
              "criteria": "cpe:2.3:a:secure_reality:phpsecurepages:0.20_beta:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "391C1EB3-4EE8-4FEC-9F72-AADF62EFB6E9"
            },
            {
              "criteria": "cpe:2.3:a:secure_reality:phpsecurepages:0.21_beta:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5563861B-AFFE-4729-9AA1-86673C66D0B9"
            },
            {
              "criteria": "cpe:2.3:a:secure_reality:phpsecurepages:0.22_beta:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8E7DC8AC-BE3C-4ED0-AB37-3FC58130FCA7"
            },
            {
              "criteria": "cpe:2.3:a:secure_reality:phpsecurepages:0.23_beta:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "13436D19-DC78-426D-835E-C83476BC7B30"
            },
            {
              "criteria": "cpe:2.3:a:secure_reality:phpsecurepages:0.24_beta:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DB5EBCFD-4E69-40EB-AAA8-39BB988E9958"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}