CVE:CVE-2007-2199
CNNVD:CNNVD-200704-427
Vincent Blavet PhpConcept Library PclTar模块的lib/pcltar.lib.php (又称pcltar.php)中存在PHP远程文件包含漏洞。当被用于包括(1)Joomla! 1.5.0 Beta,(2)N/X Web Content Management System (WCMS) 4.5,(3)CJG EXPLORER PRO 3.3,和(4)phpSiteBackup 0.1在内的多个产品中时，远程攻击者可以借助g_pcltar_lib_dir参数中的一个URL，执行任意的PHP代码。
solution:Upgrade cjg_explorer_pro cjg_explorer_pro to a higher version than 3.3,and avoid the version 3.3; Upgrade joomla joomla to a higher version than 1.5.0:beta,and avoid the version 1.5.0:beta; Upgrade nx n_x_wcms to a higher version than 4.5,and avoid the version 4.5; Upgrade phpsitebackup phpsitebackup to a higher version than 0.1,and avoid the version 0.1