CVE-2007-2458

Published: May 2, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple PHP remote file inclusion vulnerabilities in Pixaria Gallery before 1.4.3 allow remote attackers to execute arbitrary PHP code via a URL in the cfg[sys][base_path] parameter to psg.smarty.lib.php and certain include and library scripts, a different vector than CVE-2007-2457.

Affected (21)

Products: Pixaria: Pixaria Gallery

Pixaria

1 product

Pixaria Gallery

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Pixaria Pixaria Gallery	Version 1.0.1
Pixaria Pixaria Gallery	Version 1.0.2
Pixaria Pixaria Gallery	Version 1.0.3
Pixaria Pixaria Gallery	Version 1.0.4
Pixaria Pixaria Gallery	Version 1.0.5
Pixaria Pixaria Gallery	Version 1.1.1
Pixaria Pixaria Gallery	Version 1.1.2
Pixaria Pixaria Gallery	Version 1.1.3
Pixaria Pixaria Gallery	Version 1.1.4
Pixaria Pixaria Gallery	Version 1.1.5
Pixaria Pixaria Gallery	Version 1.1.6
Pixaria Pixaria Gallery	Version 1.1
Pixaria Pixaria Gallery	Version 1.2.1
Pixaria Pixaria Gallery	Version 1.2
Pixaria Pixaria Gallery	Version 1.3.1
Pixaria Pixaria Gallery	Version 1.3.2
Pixaria Pixaria Gallery	Version 1.3.3
Pixaria Pixaria Gallery	Version 1.3
Pixaria Pixaria Gallery	Version 1.4.1
Pixaria Pixaria Gallery	Version 1.4.2
Pixaria Pixaria Gallery	Version 1.4