What’s Vulnerable › Vulnerabilities

CVE-2005-2251

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2005-07-13 · updated 2026-06-16

Description

PHP remote file inclusion vulnerability in secure.php in PHPSecurePages (phpSP) 0.28beta and earlier allows remote attackers to execute arbitrary code via the cfgProgDir parameter, a variant of CVE-2001-1468.

Affected products

• Secure Reality Phpsecurepages: 0.11_beta, 0.12_beta, 0.13_beta, 0.14_beta, 0.15_beta, 0.16_beta (+12)

References

• http://secunia.com/advisories/15994
• http://securitytracker.com/id?1014410
• http://www.securityfocus.com/bid/14201
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29263
• https://www.exploit-db.com/exploits/2452
• http://secunia.com/advisories/15994
• http://securitytracker.com/id?1014410
• http://www.securityfocus.com/bid/14201
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29263
• https://www.exploit-db.com/exploits/2452

Get alerted when CVE-2005-2251 or the next vulnerability affects your stack