A vulnerability classified as critical was found in Pixaria Pixaria Gallery up to 1.4.2. Affected by this vulnerability is an unknown functionality in the library psg.smarty.lib.php. The manipulation of the argument cfg[sys][base_path] leads to code injection.

This vulnerability is known as CVE-2007-2458. The attack can be launched remotely. Furthermore, there is an exploit available.

It is recommended to upgrade the affected component.