CVE-2007-1105: PHP remote file inclusion vulnerability in functions.php in Extreme phpBB (aka phpBB Extreme) 3.0.1 allows...

Security readout for executives and security teams

CVE-2007-1105 affects Extreme phpBB, also called phpBB Extreme, 3.0.1. A remote attacker could make the application include attacker-controlled PHP through the phpbb_root_path parameter, potentially leading to code execution on the web server. The record is old and sparse, so urgency depends on whether this legacy forum software still exists in your environment. Likely exposure is limited to legacy internet-facing Extreme phpBB 3.0.1 installations or forgotten archived copies on web servers. Do not assume modern phpBB is affected from these sources. Confirm by product name, version, and the presence of the vulnerable functions.php behavior. Prioritize confirmation and removal if this software is internet-facing. The affected product is old, but the potential impact is server-side code execution and public exploit material exists. If no installation is present, this should be documented as not applicable. Mitigation focus: Identify and remove any exposed Extreme phpBB 3.0.1 installations.; Check vendor or project guidance for an upgrade or fixed release.; Disable PHP remote URL includes where operationally possible..

Prepared

Jun 29, 2026, 07:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.