Back
CVE-2007-2199
PHP remote file inclusion vulnerability in lib/pcltar.lib.php (aka pcltar.php) in the PclTar module 1.3 and 1.3.1 for Vincent Blavet…
Medium6.8EPSS 46.9%
- Published
- Updated
- Reserved
- Assigned by
- mitre
Description
PHP remote file inclusion vulnerability in lib/pcltar.lib.php (aka pcltar.php) in the PclTar module 1.3 and 1.3.1 for Vincent Blavet PhpConcept Library, as used in multiple products including (1) Joomla! 1.5.0 Beta, (2) N/X Web Content Management System (WCMS) 4.5, (3) CJG EXPLORER PRO 3.3, and (4) phpSiteBackup 0.1, allows remote attackers to execute arbitrary PHP code via a URL in the g_pcltar_lib_dir parameter.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 2.0 | Medium6.8 | AV:N/AC:M/Au:N/C:P/I:P/A:P |
- EPSS (exploitation in 30 days)
- 46.9% · top 1.2% of all CVEs (2 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.8.
Weakness
Affected products
n/a
- affected n/a
References (18)
- 25230 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 23613 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- 23708 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- http://www.hackers.ir/advisories/joomla.html (opens in a new tab)x_refsource_MISCx_transferred
- 3781 (opens in a new tab)exploitx_refsource_EXPLOIT-DBx_transferred
- phpsitebackup-pcltarlib-file-include(35092) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
- 4111 (opens in a new tab)exploitx_refsource_EXPLOIT-DBx_transferred
- 20070514 shared code incolving pcltar.lib.php/g_pcltar_lib_dir RFI (opens in a new tab)mailing-listx_refsource_VIMx_transferred
- ADV-2007-1511 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
- 25528 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- 20070904 Re: Multiple vulnerabilities in Joomla 1.5 RC 1 (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 36009 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- cjgexplorerpro-pcltarpcltrace-file-include(34273) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
- 3915 (opens in a new tab)exploitx_refsource_EXPLOIT-DBx_transferred
- joomla-pcltar-file-include(33837) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
- 24660 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- 34803 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- 20070423 Remote file inclusion in Joomla 1.5.0 Beta (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Record last updated .