CVE-2007-2660

no score yetEPSS 3.5%

PHP remote file inclusion vulnerability in pcltrace.lib.php in the PclTar module in Vincent Blavet PhpConcept Library, as used in CJG EXPLORER PRO 3.3 and earlier and probably other products, allows remote attackers to execute arbitrary PHP code via a URL in the g_pcltar_lib_dir parameter. NOTE: CVE disputes this issue since there is no include statement in pcltrace.lib.php. NOTE: the pcltar.lib.php vector is already covered by CVE-2007-2199

EPSS: 3.5% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
Published: 2007-05-14
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

cjg_explorer_pro:cjg_explorer_pro
vincent_blavet:phpconcept_library

References

http://osvdb.org/36010
http://secunia.com/advisories/25230
http://www.attrition.org/pipermail/vim/2007-May/001618.html
http://www.vupen.com/english/advisories/2007/1786
https://exchange.xforce.ibmcloud.com/vulnerabilities/34273

Check your stack JSON