CVE-2007-0635: Multiple PHP remote file inclusion vulnerabilities in EncapsCMS 0.3.6 allow remote attackers to execute arb...

Security readout for executives and security teams

CVE-2007-0635 is an old EncapsCMS 0.3.6 flaw that could let a remote attacker make the site load and run attacker-controlled PHP code. If this software is still exposed, the business risk is potential full compromise of that web application. Exposure appears limited to installations of EncapsCMS 0.3.6 where the affected PHP files are reachable, especially on internet-facing hosts. The bundle does not identify broader products, supported versions, or package names. Treat as urgent only if EncapsCMS 0.3.6 is present. The technology is very old, and reachable vulnerable copies should be removed or isolated because the reported impact is remote code execution. Mitigation focus: Identify and retire any EncapsCMS 0.3.6 deployments.; Remove public access to affected files if retirement is delayed.; Check vendor or project guidance for any archived fix..

Prepared

Jun 29, 2026, 07:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.