← Database

CVE-2007-2457

HIGH CVSS: 7.5 Published: 2007-05-02 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in resources/includes/class.Smarty.php in Pixaria Gallery before 1.4.3 allows remote attackers to execute arbitrary PHP code via a URL in the cfg[sys][base_path] parameter.

Affected Platforms

Pixaria Pixaria Gallery

Weakness Type

NVD-CWE-Other

References