CVE-2007-2199

PHP remote file inclusion vulnerability in lib/pcltar.lib.php (aka pcltar.php) in the PclTar module 1.3 and 1.3.1 for Vincent Blavet PhpConcept Library, as used in multiple products including (1) Joomla! 1.5.0 Beta, (2) N/X Web Content Management System (WCMS) 4.5, (3) CJG EXPLORER PRO 3.3, and (4) phpSiteBackup 0.1, allows remote attackers to execute arbitrary PHP code via a URL in the g_pcltar_lib_dir parameter.

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

46.76% chance of exploitation in the next 30 days, 99th percentile

Published

2007-04-24

Updated

2024-08-07

ExploitDB entries (3)

• https://www.exploit-db.com/exploits/4111
• https://www.exploit-db.com/exploits/3915
• https://www.exploit-db.com/exploits/3781

References

• CVE Record
• NVD entry

Related

• CVE-2007-2195
• CVE-2007-2200
• CVE-2007-2194
• CVE-2007-2201
• CVE-2007-2193
• CVE-2007-2202