CVE-2007-2660

MEDIUM 6.8CVE-2007-2660 · Published 14/05/2007 · updated 16/06/2026

In short

CVE-2007-2660 is a MEDIUM (CVSS 6.8) vulnerability affecting cjg explorer pro (cjg explorer pro).
Chance of exploitation in the next 30 days (EPSS): 3.5%, higher than 89.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
cjg explorer pro cjg_explorer_pro	`≤ 3.3`	No fix yet

Description

PHP remote file inclusion vulnerability in pcltrace.lib.php in the PclTar module in Vincent Blavet PhpConcept Library, as used in CJG EXPLORER PRO 3.3 and earlier and probably other products, allows remote attackers to execute arbitrary PHP code via a URL in the g_pcltar_lib_dir parameter. NOTE: CVE disputes this issue since there is no include statement in pcltrace.lib.php. NOTE: the pcltar.lib.php vector is already covered by CVE-2007-2199

References

More vulnerabilities in cjg explorer pro

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free