CVE-2007-2199 PHP remote file inclusion vulnerability in lib/pcltar.lib.php (aka pcltar.php) in the PclTar module 1.3 and 1.3.1 for Vincent Blavet PhpConcept Library, as used in multiple products including (1) Joom...
MediumCVSS 6.8
EPSS 46.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in lib/pcltar.lib.php (aka pcltar.php) in the PclTar module 1.3 and 1.3.1 for Vincent Blavet PhpConcept Library, as used in multiple products including (1) Joomla! 1.5.0 Beta, (2) N/X Web Content Management System (WCMS) 4.5, (3) CJG EXPLORER PRO 3.3, and (4) phpSiteBackup 0.1, allows remote attackers to execute arbitrary PHP code via a URL in the g_pcltar_lib_dir parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cjg explorer pro | = 3.3 | No fix listed |
| joomla | = 1.5.0-beta | No fix listed |
| nx n x wcms | = 4.5 | No fix listed |
| phpsitebackup | = 0.1 | No fix listed |
References
- 34803 vdb-entry
- 36009 vdb-entry
- 25230 third-party-advisory vendor-advisory
- 20070514 shared code incolving pcltar.lib.php/g_pcltar_lib_dir RFI mailing-list
- www.hackers.ir exploit vendor-advisory
- 20070423 Remote file inclusion in Joomla 1.5.0 Beta mailing-list
- 20070904 Re: Multiple vulnerabilities in Joomla 1.5 RC 1 mailing-list
- 23613 vdb-entry
- 23708 vdb-entry
- 24660 vdb-entry
- 25528 vdb-entry
- ADV-2007-1511 vdb-entry vendor-advisory
- joomla-pcltar-file-include(33837) vdb-entry
- cjgexplorerpro-pcltarpcltrace-file-include(34273) vdb-entry
- phpsitebackup-pcltarlib-file-include(35092) vdb-entry
- 3781 exploit
- 3915 exploit
- 4111 exploit