CVE-2007-0703: PHP remote file inclusion vulnerability in library/StageLoader.php in WebBuilder 2.0 and earlier allows rem...

Security readout for executives and security teams

CVE-2007-0703 is an old remote file inclusion flaw in WebBuilder 2.0 and earlier. A remote attacker could make the application load attacker-controlled PHP through a module path parameter, which can lead to arbitrary PHP execution. The source bundle does not identify a patch or active exploitation. Exposure is likely limited to legacy WebBuilder 2.0 or earlier PHP sites that are still reachable over the internet. The bundle provides no CPE data or broader affected-product list, so teams should verify by application inventory and file/version evidence. Prioritize any confirmed internet-facing WebBuilder 2.0 or earlier system for rapid containment. The business concern is full server-side code execution, but evidence is sparse and no active exploitation is cited in the provided sources. Mitigation focus: Identify any WebBuilder 2.0 or earlier deployments.; Remove internet exposure for confirmed vulnerable instances during assessment.; Check vendor or maintainer guidance; no patch is named in the bundle..

Prepared

Jun 29, 2026, 07:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.