CVE-2007-2199

no score yetEPSS 47%

PHP remote file inclusion vulnerability in lib/pcltar.lib.php (aka pcltar.php) in the PclTar module 1.3 and 1.3.1 for Vincent Blavet PhpConcept Library, as used in multiple products including (1) Joomla! 1.5.0 Beta, (2) N/X Web Content Management System (WCMS) 4.5, (3) CJG EXPLORER PRO 3.3, and (4) phpSiteBackup 0.1, allows remote attackers to execute arbitrary PHP code via a URL in the g_pcltar_lib_dir parameter.

EPSS: 47% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2007-04-24
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

cjg_explorer_pro:cjg_explorer_pro
joomla:joomla
nx:n_x_wcms
phpsitebackup:phpsitebackup

References

http://osvdb.org/34803
http://osvdb.org/36009
http://secunia.com/advisories/25230
http://www.attrition.org/pipermail/vim/2007-May/001618.html
http://www.hackers.ir/advisories/joomla.html

Check your stack JSON