CVE-2007-2457

None

CVSS

—

EPSS

11.8%

Published

May 2, 2007

CISA due date

—

The record

PHP remote file inclusion vulnerability in resources/includes/class.Smarty.php in Pixaria Gallery before 1.4.3 allows remote attackers to execute arbitrary PHP code via a URL in the cfg[sys][base_path] parameter.

Affected packages

Ecosystem	Package	Introduced	Fixed