01 Record

CVE-2007-2199

PHP remote file inclusion vulnerability in lib/pcltar.lib.php (aka pcltar.php) in the PclTar module 1.3 and 1.3.1 for Vincent Blavet PhpConcept Library, as used in multiple products including (1)

UnratedPUBLISHEDCNA: mitre

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

PHP remote file inclusion vulnerability in lib/pcltar.lib.php (aka pcltar.php) in the PclTar module 1.3 and 1.3.1 for Vincent Blavet PhpConcept Library, as used in multiple products including (1)

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 46.91% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 98.7% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Modified. NVD last modified this record on 2026-06-16.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2007-04-24 20:00Z19 YR AGO

Last updated

2024-08-07 13:23Z2 YR AGO

Reserved

2007-04-24

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-94Improper Control of Generation of Code ('Code Injection')Base

Data version

5.1

Document digest

1ab1751787054b6087e50bfa6633494df4697736c46aa36d12eee1bb0baa6b9e

05 Affected products

VendorProductVersionsPlatforms

cjg_explorer_procjg_explorer_proNot specified—

joomlajoomlaNot specified—

nxn_x_wcmsNot specified—

phpsitebackupphpsitebackupNot specified—

06 References

secunia.com25230http://secunia.com/advisories/25230third-party-advisoryx_refsource_SECUNIA
www.securityfocus.com23613http://www.securityfocus.com/bid/23613vdb-entryx_refsource_BID
www.securityfocus.com23708http://www.securityfocus.com/bid/23708vdb-entryx_refsource_BID
www.hackers.irhttp://www.hackers.ir/advisories/joomla.htmlx_refsource_MISC
www.exploit-db.com3781https://www.exploit-db.com/exploits/3781exploitx_refsource_EXPLOIT-DB
exchange.xforce.ibmcloud.comphpsitebackup-pcltarlib-file-include(35092)https://exchange.xforce.ibmcloud.com/vulnerabilities/35092vdb-entryx_refsource_XF
www.exploit-db.com4111https://www.exploit-db.com/exploits/4111exploitx_refsource_EXPLOIT-DB
www.attrition.org20070514 shared code incolving pcltar.lib.php/g_pcltar_lib_dir RFIhttp://www.attrition.org/pipermail/vim/2007-May/001618.htmlmailing-listx_refsource_VIM
www.vupen.comADV-2007-1511http://www.vupen.com/english/advisories/2007/1511vdb-entryx_refsource_VUPEN
www.securityfocus.com25528http://www.securityfocus.com/bid/25528vdb-entryx_refsource_BID
www.securityfocus.com20070904 Re: Multiple vulnerabilities in Joomla 1.5 RC 1http://www.securityfocus.com/archive/1/478503/100/0/threadedmailing-listx_refsource_BUGTRAQ
osvdb.org36009http://osvdb.org/36009vdb-entryx_refsource_OSVDB
exchange.xforce.ibmcloud.comcjgexplorerpro-pcltarpcltrace-file-include(34273)https://exchange.xforce.ibmcloud.com/vulnerabilities/34273vdb-entryx_refsource_XF
www.exploit-db.com3915https://www.exploit-db.com/exploits/3915exploitx_refsource_EXPLOIT-DB
exchange.xforce.ibmcloud.comjoomla-pcltar-file-include(33837)https://exchange.xforce.ibmcloud.com/vulnerabilities/33837vdb-entryx_refsource_XF
www.securityfocus.com24660http://www.securityfocus.com/bid/24660vdb-entryx_refsource_BID
osvdb.org34803http://osvdb.org/34803vdb-entryx_refsource_OSVDB
www.securityfocus.com20070423 Remote file inclusion in Joomla 1.5.0 Betahttp://www.securityfocus.com/archive/1/466687/100/0/threadedmailing-listx_refsource_BUGTRAQ