CVE-2007-2457

PHP remote file inclusion vulnerability in resources/includes/class.Smarty.php in Pixaria Gallery before 1.4.3 allows remote attackers to execute arbitrary PHP code via a URL in the cfg[sys][base_path] parameter.

• http://osvdb.org/34976
• http://pixaria.com/index.history.phpURL Repurposed
• http://secunia.com/advisories/24821Vendor Advisory
• http://www.pixaria.com/news/article/70/URL Repurposed
• http://www.pixaria.com/news/article/71/Patch, URL Repurposed
• http://www.securityfocus.com/archive/1/465847/100/200/threaded
• http://www.securityfocus.com/bid/23489Patch
• http://www.vupen.com/english/advisories/2007/1390
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33662
• https://www.exploit-db.com/exploits/3733
• http://osvdb.org/34976
• http://pixaria.com/index.history.phpURL Repurposed
• http://secunia.com/advisories/24821Vendor Advisory
• http://www.pixaria.com/news/article/70/URL Repurposed
• http://www.pixaria.com/news/article/71/Patch, URL Repurposed
• http://www.securityfocus.com/archive/1/465847/100/200/threaded
• http://www.securityfocus.com/bid/23489Patch
• http://www.vupen.com/english/advisories/2007/1390
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33662
• https://www.exploit-db.com/exploits/3733

Published

May 2, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-2451Unspecified vulnerability in drivers/crypto/geode-aes.c in G…
• CVE-2007-2452Heap-based buffer overflow in the visit_old_format function …
• CVE-2007-2453The random number feature in Linux kernel 2.6 before 2.6.20.…
• CVE-2007-2454Heap-based buffer overflow in the VGA device in Parallels al…
• CVE-2007-2455Parallels allows local users to cause a denial of service (v…
• CVE-2007-2456Multiple PHP remote file inclusion vulnerabilities in FireFl…
• CVE-2007-2458Multiple PHP remote file inclusion vulnerabilities in Pixari…
• CVE-2007-2459Heap-based buffer overflow in the BMP reader (bmp.c) in Imag…
• CVE-2007-2460PHP remote file inclusion vulnerability in modules/admin/inc…
• CVE-2007-2461The DHCP relay agent in Cisco Adaptive Security Appliance (A…
• CVE-2007-2462Unspecified vulnerability in Cisco Adaptive Security Applian…
• CVE-2007-2463Unspecified vulnerability in Cisco Adaptive Security Applian…