CVE-2007-2458

Multiple PHP remote file inclusion vulnerabilities in Pixaria Gallery before 1.4.3 allow remote attackers to execute arbitrary PHP code via a URL in the cfg[sys][base_path] parameter to psg.smarty.lib.php and certain include and library scripts, a different vector than CVE-2007-2457.

• CWE-94

• http://pixaria.com/index.history.phpURL Repurposed
• http://secunia.com/advisories/24821Vendor Advisory
• http://www.pixaria.com/news/article/70/URL Repurposed
• http://www.pixaria.com/news/article/71/Patch, URL Repurposed
• http://www.vupen.com/english/advisories/2007/1390Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33662
• https://www.exploit-db.com/exploits/3733
• http://pixaria.com/index.history.phpURL Repurposed
• http://secunia.com/advisories/24821Vendor Advisory
• http://www.pixaria.com/news/article/70/URL Repurposed
• http://www.pixaria.com/news/article/71/Patch, URL Repurposed
• http://www.vupen.com/english/advisories/2007/1390Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33662
• https://www.exploit-db.com/exploits/3733

Published

May 2, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-2452Heap-based buffer overflow in the visit_old_format function …
• CVE-2007-2453The random number feature in Linux kernel 2.6 before 2.6.20.…
• CVE-2007-2454Heap-based buffer overflow in the VGA device in Parallels al…
• CVE-2007-2455Parallels allows local users to cause a denial of service (v…
• CVE-2007-2456Multiple PHP remote file inclusion vulnerabilities in FireFl…
• CVE-2007-2457PHP remote file inclusion vulnerability in resources/include…
• CVE-2007-2459Heap-based buffer overflow in the BMP reader (bmp.c) in Imag…
• CVE-2007-2460PHP remote file inclusion vulnerability in modules/admin/inc…
• CVE-2007-2461The DHCP relay agent in Cisco Adaptive Security Appliance (A…
• CVE-2007-2462Unspecified vulnerability in Cisco Adaptive Security Applian…
• CVE-2007-2463Unspecified vulnerability in Cisco Adaptive Security Applian…
• CVE-2007-2464Race condition in Cisco Adaptive Security Appliance (ASA) an…