CVE:CVE-2001-1468
CNNVD:CNNVD-200102-002
phpSecurePages 0.24版本及之前版本中checklogin.php存在PHP远程文件包含漏洞。远程攻击者可以通过修改cfgProgDir参数以引用远程web服务器上含代码的URL来执行任意PHP代码。
solution:Upgrade secure_reality phpsecurepages to a higher version than 0.11_beta,0.12_beta,0.13_beta,0.14_beta,0.15_beta,0.16_beta,0.17_beta,0.18_beta,0.19_beta,0.20_beta,0.21_beta,0.22_beta,0.23_beta,0.24_beta,and avoid the version 0.11_beta,0.12_beta,0.13_beta,0.14_beta,0.15_beta,0.16_beta,0.17_beta,0.18_beta,0.19_beta,0.20_beta,0.21_beta,0.22_beta,0.23_beta,0.24_beta