Vulnerability Database

296,147

Total vulnerabilities in the database

CVE-2007-2199

PHP remote file inclusion vulnerability in lib/pcltar.lib.php (aka pcltar.php) in the PclTar module 1.3 and 1.3.1 for Vincent Blavet PhpConcept Library, as used in multiple products including (1) Joomla! 1.5.0 Beta, (2) N/X Web Content Management System (WCMS) 4.5, (3) CJG EXPLORER PRO 3.3, and (4) phpSiteBackup 0.1, allows remote attackers to execute arbitrary PHP code via a URL in the g_pcltar_lib_dir parameter.

  • Published: Apr 24, 2007
  • Updated: Apr 13, 2023
  • CVE: CVE-2007-2199
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
nx / n_x_wcms 4.5 4.5.x
phpsitebackup / phpsitebackup 0.1 0.1.x
cjg_explorer_pro / cjg_explorer_pro 3.3 3.3.x
Joomla / joomla 1.5.0-beta 1.5.0-beta.x