CVE-2001-1468: Secure Reality Phpsecurepages

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in checklogin.php in phpSecurePages 0.24 and earlier allows remote attackers to execute arbitrary PHP code by modifying the cfgProgDir parameter to reference a URL on a remote web server that contains the code.

Affected products

• Secure Reality Phpsecurepages: version 0.11_beta only; version 0.12_beta only; version 0.13_beta only; version 0.14_beta only; version 0.15_beta only; version 0.16_beta only; …

Published 2001-02-07. Last modified 2026-06-16.