CVEvulnerability

CVE-2007-2660

6.8 MEDIUM Published 2007-05-14 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-05-14
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P

Description

PHP remote file inclusion vulnerability in pcltrace.lib.php in the PclTar module in Vincent Blavet PhpConcept Library, as used in CJG EXPLORER PRO 3.3 and earlier and probably other products, allows remote attackers to execute arbitrary PHP code via a URL in the g_pcltar_lib_dir parameter. NOTE: CVE disputes this issue since there is no include statement in pcltrace.lib.php. NOTE: the pcltar.lib.php vector is already covered by CVE-2007-2199

Affected configurations

• cjg explorer pro cjg explorer pro (<= 3.3) • vincent blavet phpconcept library

References