CVE-2007-2660

23Vexday Risk Score

Sin señal de explotación. Ella tiene prueba de concepto pública.

ssvc Attendepss 3.5%

probabilidad de explotación

3.5%top 12% de las CVE

explotación observada

noninguna fuente lo reporta

1 exploit(s) público(s)

PHP remote file inclusion vulnerability in pcltrace.lib.php in the PclTar module in Vincent Blavet PhpConcept Library, as used in CJG EXPLORER PRO 3.3 and earlier and probably other products, allows remote attackers to execute arbitrary PHP code via a URL in the g_pcltar_lib_dir parameter. NOTE: CVE disputes this issue since there is no include statement in pcltrace.lib.php. NOTE: the pcltar.lib.php vector is already covered by CVE-2007-2199

Productos afectados

n/a · n/a

PoCs públicas encontradas — 1✓ VexDay Proof

cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/3915

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

Referencias

http://osvdb.org/36010 http://secunia.com/advisories/25230 https://exchange.xforce.ibmcloud.com/vulnerabilities/34273 https://www.exploit-db.com/exploits/3915 http://www.attrition.org/pipermail/vim/2007-May/001618.html http://www.vupen.com/english/advisories/2007/1786