CVE Feed

    Dashboard / CVE / CVE-2007-2199

    CVE-2007-2199

    PHP remote file inclusion vulnerability in lib/pcltar.lib.php (aka pcltar.php) in the PclTar module 1.3 and 1.3.1 for Vincent Blavet PhpConcept Library, as used in multiple products including (1) Joomla! 1.5.0 Beta, (2) N/X Web Content Management System (WCMS) 4.5, (3) CJG EXPLORER PRO 3.3, and (4) phpSiteBackup 0.1, allows remote attackers to execute arbitrary PHP code via a URL in the g_pcltar_lib_dir parameter.

    Published:Apr 24, 2007
    Last Modified:Apr 23, 2026
    EPS:Apr 24, 2007
    EPSS Score:0.85872
    CVSS Score:6.8

    Affected Products

    Vendor
    Cjg Explorer Pro
    Product
    Cjg Explorer Pro
    Vendor
    Joomla
    Product
    Joomla
    Vendor
    Nx
    Product
    N X Wcms
    Vendor
    Phpsitebackup
    Product
    Phpsitebackup

    Exploits

    http://www.hackers.ir/advisories/joomla.htmlhttp://www.hackers.ir/advisories/joomla.htmlhttps://www.exploit-db.com/exploits/3915https://www.exploit-db.com/exploits/3781https://www.exploit-db.com/exploits/4111

    References

    http://osvdb.org/34803
    http://osvdb.org/36009
    http://secunia.com/advisories/25230
    http://www.attrition.org/pipermail/vim/2007-May/001618.html
    http://www.hackers.ir/advisories/joomla.html
    http://www.securityfocus.com/archive/1/466687/100/0/threaded
    http://www.securityfocus.com/archive/1/478503/100/0/threaded
    http://www.securityfocus.com/bid/23613
    http://www.securityfocus.com/bid/23708
    http://www.securityfocus.com/bid/24660
    http://www.securityfocus.com/bid/25528
    http://www.vupen.com/english/advisories/2007/1511
    https://exchange.xforce.ibmcloud.com/vulnerabilities/33837
    https://exchange.xforce.ibmcloud.com/vulnerabilities/34273
    https://exchange.xforce.ibmcloud.com/vulnerabilities/35092
    https://www.exploit-db.com/exploits/3781
    https://www.exploit-db.com/exploits/3915
    https://www.exploit-db.com/exploits/4111
    http://osvdb.org/34803
    http://osvdb.org/36009
    http://secunia.com/advisories/25230
    http://www.attrition.org/pipermail/vim/2007-May/001618.html
    http://www.hackers.ir/advisories/joomla.html
    http://www.securityfocus.com/archive/1/466687/100/0/threaded
    http://www.securityfocus.com/archive/1/478503/100/0/threaded
    http://www.securityfocus.com/bid/23613
    http://www.securityfocus.com/bid/23708
    http://www.securityfocus.com/bid/24660
    http://www.securityfocus.com/bid/25528
    http://www.vupen.com/english/advisories/2007/1511
    https://exchange.xforce.ibmcloud.com/vulnerabilities/33837
    https://exchange.xforce.ibmcloud.com/vulnerabilities/34273
    https://exchange.xforce.ibmcloud.com/vulnerabilities/35092
    https://www.exploit-db.com/exploits/3781
    https://www.exploit-db.com/exploits/3915
    https://www.exploit-db.com/exploits/4111

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High