CVE-2007-0797: PHP remote file inclusion vulnerability in theme/settings.php in bluevirus-design SMA-DB 0.3.9 and earlier...

Security readout for executives and security teams

CVE-2007-0797 is a remote file inclusion flaw in theme/settings.php of bluevirus-design SMA-DB 0.3.9 and earlier. If reachable, an attacker could make the application load remote PHP code and execute it in the server context. Public sources do not confirm active exploitation or a vendor fix. Exposure is most likely on legacy public web servers still running bluevirus-design SMA-DB 0.3.9 or earlier. Modern environments are unlikely to be affected unless old PHP applications remain deployed. The source bundle provides no CPEs or platform inventory hints. Prioritize if the organization hosts legacy PHP applications or inherited web properties. The business risk is server compromise from an old, remotely triggerable flaw. If SMA-DB is not present, no further action is needed beyond documenting the check. Mitigation focus: Identify and retire any SMA-DB 0.3.9 or earlier deployments.; Check original vendor or trusted advisory guidance for fixed versions or official mitigations.; Restrict public access to any affected legacy instance until resolved..

Prepared

Jun 29, 2026, 07:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.