CVE-2007-2660 | BDVDB-2026-24159 Detail

Description#

PHP remote file inclusion vulnerability in pcltrace.lib.php in the PclTar module in Vincent Blavet PhpConcept Library, as used in CJG EXPLORER PRO 3.3 and earlier and probably other products, allows remote attackers to execute arbitrary PHP code via a URL in the g_pcltar_lib_dir parameter. NOTE: CVE disputes this issue since there is no include statement in pcltrace.lib.php. NOTE: the pcltar.lib.php vector is already covered by CVE-2007-2199

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/25230
http://www.vupen.com/english/advisories/2007/1786
http://www.attrition.org/pipermail/vim/2007-May/001618.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/34273
https://www.exploit-db.com/exploits/3915
http://osvdb.org/36010

Exploit#

https://www.exploit-db.com/exploits/3915

History#

Version 12007-05-14Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.