Check Point Advisories

PhpSecurePages secure.php cfgProgDir Parameter PHP Code Execution - Ver2 (CVE-2001-1468)

Check Point Reference:	CPAI-2014-0816
Date Published:	3 Feb 2014
Severity:	Critical
Last Updated:	Wednesday 01 January, 2014
Source:	CVE-2001-1468
Protection Provided by:
Who is Vulnerable?
Vulnerability Description	A code execution vulnerability has been reported in phpSecurePages. A remote attacker could trigger this vulnerability by modifying the cfgProgDir parameter to reference a URL on a remote web server that contains the code. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.