CVE-2007-2458

HIGH 7.5CVE-2007-2458 · Published 02/05/2007 · updated 16/06/2026

Package	Affected versions	Patched versions
pixaria gallery pixaria	`= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.0.5= 1.1= 1.1.1= 1.1.2= 1.1.3= 1.1.4= 1.1.5= 1.1.6= 1.2= 1.2.1= 1.3= 1.3.1= 1.3.2= 1.3.3= 1.4= 1.4.1= 1.4.2`	No fix yet

Description

Multiple PHP remote file inclusion vulnerabilities in Pixaria Gallery before 1.4.3 allow remote attackers to execute arbitrary PHP code via a URL in the cfg[sys][base_path] parameter to psg.smarty.lib.php and certain include and library scripts, a different vector than CVE-2007-2457.

References

pixaria.com/index.history.php · URL Repurposed
secunia.com/advisories/24821 · Vendor Advisory
pixaria.com/news/article/70 · URL Repurposed
pixaria.com/news/article/71 · Patch
vupen.com/english/advisories/2007/1390 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/33662
exploit-db.com/exploits/3733

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free