CVE-2007-2660

** DISPUTED ** PHP remote file inclusion vulnerability in pcltrace.lib.php in the PclTar module in Vincent Blavet PhpConcept Library, as used in CJG EXPLORER PRO 3.3 and earlier and probably other products, allows remote attackers to execute arbitrary PHP code via a URL in the g_pcltar_lib_dir parameter. NOTE: CVE disputes this issue since there is no include statement in pcltrace.lib.php. NOTE: the pcltar.lib.php vector is already covered by CVE-2007-2199.

Link	Resource
http://www.attrition.org/pipermail/vim/2007-May/001618.html
http://secunia.com/advisories/25230	Vendor Advisory
http://osvdb.org/36010
http://www.vupen.com/english/advisories/2007/1786
https://exchange.xforce.ibmcloud.com/vulnerabilities/34273
https://www.exploit-db.com/exploits/3915

Configuration 1

cpe:2.3:a:cjg_explorer_pro:cjg_explorer_pro:*:*:*:*:*:*:*:* cpe:2.3:a:vincent_blavet:phpconcept_library:*:*:*:*:*:*:*:*

---

Published : 2007-05-14 11:19

Updated : 2017-10-11 01:32

---

NVD link : CVE-2007-2660

Mitre link : CVE-2007-2660

No products.

NVD-CWE-Other