Every CVESearch/Get API key

CVE-2007-2199

PHP remote file inclusion vulnerability in lib/pcltar.lib.php (aka pcltar.php) in the PclTar...

6.8 MediumPublic exploit

CVE-2007-2199 is a medium vulnerability (CVSS 6.8) in Cjg Explorer Pro Explorer Pro, published April 24, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 46.9%, the 98th percentile. No source names a fixed version.

What does this mean?
Severity
6.8 MediumCVSS 2.0, NVD
Exploit chance
46.9%EPSS, 98th percentile
Exploitation
None known3 public exploits
Fixed in
No fix listedNo source names one

Description

PHP remote file inclusion vulnerability in lib/pcltar.lib.php (aka pcltar.php) in the PclTar module 1.3 and 1.3.1 for Vincent Blavet PhpConcept Library, as used in multiple products including (1) Joomla! 1.5.0 Beta, (2) N/X Web Content Management System (WCMS) 4.5, (3) CJG EXPLORER PRO 3.3, and (4) phpSiteBackup 0.1, allows remote attackers to execute arbitrary PHP code via a URL in the g_pcltar_lib_dir parameter.

Exploit likelihood

46.9%Up 34.3 points since Feb 4, 2022
90%50%10%1%

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBJoomla! 1.5.0 Beta - 'pcltar.php' Remote File Inclusion2007-04-23
Exploit-DBCJG EXPLORER PRO 3.2 - 'g_pcltar_lib_dir' Remote File Inclusion2007-05-13
Exploit-DBPHPSiteBackup 0.1 - 'pcltar.lib.php' Remote File Inclusion2007-06-26

What each source reports

NVD Score used6.8

PHP remote file inclusion vulnerability in lib/pcltar.lib.php (aka pcltar.php) in the PclTar module 1.3 and 1.3.1 for Vincent Blavet PhpConcept Library, as used in multiple products including (1) Joomla! 1.5.0 Beta, (2) N/X Web Content Management System (WCMS) 4.5, (3) CJG EXPLORER PRO 3.3, and (4) phpSiteBackup 0.1, allows remote attackers to execute arbitrary PHP code via a URL in the g_pcltar_lib_dir parameter.

Record
CVE-2007-2199
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-94
Updated
2026-11-02
CVE ListNo score

PHP remote file inclusion vulnerability in lib/pcltar.lib.php (aka pcltar.php) in the PclTar module 1.3 and 1.3.1 for Vincent Blavet PhpConcept Library, as used in multiple products including (1) Joomla! 1.5.0 Beta, (2) N/X Web Content Management System (WCMS) 4.5, (3) CJG EXPLORER PRO 3.3, and (4) phpSiteBackup 0.1, allows remote attackers to execute arbitrary PHP code via a URL in the g_pcltar_lib_dir parameter.

Record
CVE-2007-2199
Updated
2026-11-02
EUVDEUVD-2007-2194No score

PHP remote file inclusion vulnerability in lib/pcltar.lib.php (aka pcltar.php) in the PclTar module 1.3 and 1.3.1 for Vincent Blavet PhpConcept Library, as used in multiple products including (1) Joomla! 1.5.0 Beta, (2) N/X Web Content Management System (WCMS) 4.5, (3) CJG EXPLORER PRO 3.3, and (4) phpSiteBackup 0.1, allows remote attackers to execute arbitrary PHP code via a URL in the g_pcltar_lib_dir parameter.

Record
EUVD-2007-2194
Updated
2026-11-03
GitHub AdvisoriesGHSA-gfmp-6wvc-g9jjNo score

PHP remote file inclusion vulnerability in lib/pcltar.lib.php (aka pcltar.php) in the PclTar...

PHP remote file inclusion vulnerability in lib/pcltar.lib.php (aka pcltar.php) in the PclTar module 1.3 and 1.3.1 for Vincent Blavet PhpConcept Library, as used in multiple products including (1) Joomla! 1.5.0 Beta, (2) N/X Web Content Management System (WCMS) 4.5, (3) CJG EXPLORER PRO 3.3, and (4) phpSiteBackup 0.1, allows remote attackers to execute arbitrary PHP code via a URL in the g_pcltar_lib_dir parameter.

Record
GHSA-gfmp-6wvc-g9jj
Weakness
CWE-94
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
aliases, exploits, facts, references, titleExploit-DB, GitHub Advisories
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 14 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open