CVE-2007-0757: PHP remote file inclusion vulnerability in index.php in Miguel Nunes Call of Duty 2 (CoD2) DreamStats Syste...

Security readout for executives and security teams

CVE-2007-0757 affects Miguel Nunes Call of Duty 2 DreamStats System 4.2 and earlier. A web parameter can be abused to make the application include attacker-controlled PHP from a URL, which can lead to arbitrary PHP code execution on the server. Exposure is likely limited to legacy public or internal sites still running CoD2 DreamStats System 4.2 or earlier with PHP configured in a way that permits remote inclusion. The product appears old and niche, so asset discovery is the main uncertainty. Prioritize if the software is still deployed, especially on an internet-facing server. The product is old, but the stated impact is arbitrary PHP execution. If no instance exists, no action beyond documenting non-exposure is needed. Mitigation focus: Inventory web assets for DreamStats System installations and version evidence.; Remove or isolate any DreamStats System 4.2 or earlier deployment.; Check vendor or archived advisory guidance for fixed versions or official remediation..

Prepared

Jun 29, 2026, 07:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.