CVE-2007-2660: Medium severity CJG EXPLORER PRO CJG EXPLORER PRO vulnerability
DISPUTED PHP remote file inclusion vulnerability in pcltrace.lib.php in the PclTar module in Vincent Blavet PhpConcept Library, as used in CJG EXPLORER PRO 3.3 and earlier and probably other products, allows remote attackers to execute arbitrary PHP code via a URL in the gpcltarlibdir parameter. NOTE: CVE disputes this issue since there is no include statement in pcltrace.lib.php. NOTE: the pcltar.lib.php vector is already covered by CVE-2007-2199.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2660?
CVE-2007-2660 is classified as a high severity vulnerability allowing remote code execution.
How do I fix CVE-2007-2660?
To fix CVE-2007-2660, update the affected software to a version that does not include the vulnerability.
What systems are affected by CVE-2007-2660?
CVE-2007-2660 affects CJG EXPLORER PRO version 3.3 and earlier, as well as other products utilizing the PclTar module of the PhpConcept Library.
Can CVE-2007-2660 be exploited remotely?
Yes, CVE-2007-2660 can be exploited remotely by attackers to execute arbitrary PHP code.
Is CVE-2007-2660 a common vulnerability?
CVE-2007-2660 is considered a notable vulnerability, mainly due to its potential for remote code execution.