CVE-2007-2199

EPSS 46.8%

PHP remote file inclusion vulnerability in lib/pcltar.lib.php (aka pcltar.php) in the PclTar module 1.3 and 1.3.1 for Vincent Blavet PhpConcept Library, as used in multiple products including (1) Joomla! 1.5.0 Beta, (2) N/X Web Content Management System (WCMS) 4.5, (3) CJG EXPLORER PRO 3.3, and (4) phpSiteBackup 0.1, allows remote attackers to execute arbitrary PHP code via a URL in the g_pcltar_lib_dir parameter.

Affected products

n/a · n/a

public PoCs found — 3

cve_referencewww.exploit-db.com/exploits/3915unverified cve_referencewww.exploit-db.com/exploits/3781unverified cve_referencewww.exploit-db.com/exploits/4111unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/34803 http://osvdb.org/36009 http://secunia.com/advisories/25230 https://exchange.xforce.ibmcloud.com/vulnerabilities/33837 https://exchange.xforce.ibmcloud.com/vulnerabilities/34273 https://exchange.xforce.ibmcloud.com/vulnerabilities/35092 https://www.exploit-db.com/exploits/3781 https://www.exploit-db.com/exploits/3915 https://www.exploit-db.com/exploits/4111 http://www.attrition.org/pipermail/vim/2007-May/001618.html http://www.hackers.ir/advisories/joomla.html http://www.securityfocus.com/archive/1/466687/100/0/threaded