6.8

CVE-2007-2660

EPSS 10.93%
Veröffentlicht 14.05.2007 23:19:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

PHP remote file inclusion vulnerability in pcltrace.lib.php in the PclTar module in Vincent Blavet PhpConcept Library, as used in CJG EXPLORER PRO 3.3 and earlier and probably other products, allows remote attackers to execute arbitrary PHP code via a URL in the g_pcltar_lib_dir parameter.  NOTE: CVE disputes this issue since there is no include statement in pcltrace.lib.php.  NOTE: the pcltar.lib.php vector is already covered by CVE-2007-2199

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 9

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cjg Explorer Pro ≫ Cjg Explorer Pro Version <= 3.3

Vincent Blavet ≫ Phpconcept Library

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	10.93%	0.931

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

http://secunia.com/advisories/25230

Vendor Advisory

http://www.attrition.org/pipermail/vim/2007-May/001618.html

https://exchange.xforce.ibmcloud.com/vulnerabilities/34273

https://www.exploit-db.com/exploits/3915

http://osvdb.org/36010

http://www.vupen.com/english/advisories/2007/1786

https://nvd.nist.gov/vuln/detail/CVE-2007-2660

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-2660

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-2660

EUVD