CVE

Id
26017  
CVE No.
CVE-2007-2660  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in pcltrace.lib.php in the PclTar module in Vincent Blavet PhpConcept Library, as used in CJG EXPLORER PRO 3.3 and earlier and probably other products, allows remote attackers to execute arbitrary PHP code via a URL in the g_pcltar_lib_dir parameter. NOTE: CVE disputes this issue since there is no include statement in pcltrace.lib.php. NOTE: the pcltar.lib.php vector is already covered by CVE-2007-2199.  
Phase
Assigned (20070514)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
261575 26017 CVE-2007-2660 MILW0RM:3915  View
261576 26017 CVE-2007-2660 URL:http://www.milw0rm.com/exploits/3915  View
261577 26017 CVE-2007-2660 VIM:20070514 shared code incolving pcltar.lib.php/g_pcltar_lib_dir RFI  View
261578 26017 CVE-2007-2660 URL:http://www.attrition.org/pipermail/vim/2007-May/001618.html  View
261579 26017 CVE-2007-2660 VUPEN:ADV-2007-1786  View
261580 26017 CVE-2007-2660 URL:http://www.vupen.com/english/advisories/2007/1786  View
261581 26017 CVE-2007-2660 OSVDB:36010  View
261582 26017 CVE-2007-2660 URL:http://osvdb.org/36010  View
261583 26017 CVE-2007-2660 SECUNIA:25230  View
261584 26017 CVE-2007-2660 URL:http://secunia.com/advisories/25230  View
261585 26017 CVE-2007-2660 XF:cjgexplorerpro-pcltarpcltrace-file-include(34273)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53325 JVNDB-2007-002017 EfesTECH Haber における SQL インジェクションの脆弱性 EfesTECH Haber には、SQL インジェクションの脆弱性が存在します。 CVE-2007-2662 26017 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002017.html  View