CVE-2005-2251: Secure Reality Phpsecurepages

High severity, CVSS 7.5. EPSS: 4.9% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in secure.php in PHPSecurePages (phpSP) 0.28beta and earlier allows remote attackers to execute arbitrary code via the cfgProgDir parameter, a variant of CVE-2001-1468.

Affected products

• Secure Reality Phpsecurepages: version 0.11_beta only; version 0.12_beta only; version 0.13_beta only; version 0.14_beta only; version 0.15_beta only; version 0.16_beta only; …

Published 2005-07-13. Last modified 2026-06-16.