6.8

CVE-2007-2660

EPSS 10.93%
Published 14.05.2007 23:19:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

PHP remote file inclusion vulnerability in pcltrace.lib.php in the PclTar module in Vincent Blavet PhpConcept Library, as used in CJG EXPLORER PRO 3.3 and earlier and probably other products, allows remote attackers to execute arbitrary PHP code via a URL in the g_pcltar_lib_dir parameter.  NOTE: CVE disputes this issue since there is no include statement in pcltrace.lib.php.  NOTE: the pcltar.lib.php vector is already covered by CVE-2007-2199

Affected products Warnungen 0 Metrics 2 CWE 0 References 9

Data is provided by the National Vulnerability Database (NVD)

Cjg Explorer Pro ≫ Cjg Explorer Pro Version <= 3.3

Vincent Blavet ≫ Phpconcept Library

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	10.93%	0.931

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

http://secunia.com/advisories/25230

Vendor Advisory

http://www.attrition.org/pipermail/vim/2007-May/001618.html

https://exchange.xforce.ibmcloud.com/vulnerabilities/34273

https://www.exploit-db.com/exploits/3915

http://osvdb.org/36010

http://www.vupen.com/english/advisories/2007/1786

https://nvd.nist.gov/vuln/detail/CVE-2007-2660

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-2660

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-2660

EUVD