CVE-2007-1106: PHP remote file inclusion vulnerability in includes/functions_nomoketos_rules.php in the NoMoKeTos Rules 0....

Security readout for executives and security teams

CVE-2007-1106 affects NoMoKeTos Rules 0.0.1 for phpBB. A vulnerable PHP include path could let a remote attacker run arbitrary PHP code. For a business, the concern is full compromise of an exposed legacy forum installation, but the provided sources do not confirm active exploitation or a vendor patch. Exposure is likely limited to legacy phpBB sites that installed the NoMoKeTos Rules 0.0.1 module and still expose the vulnerable PHP file. Organizations without this module are not indicated as affected by the provided sources. Prioritize if any internet-facing legacy phpBB forum uses this module. The vulnerability is old, but the impact is severe and public exploit material exists. If the module is absent, this should be a low-effort inventory confirmation rather than an emergency response. Mitigation focus: Inventory phpBB installations for NoMoKeTos Rules 0.0.1.; Check vendor and archived advisory guidance for fixed or replacement versions.; Disable or remove the affected module if remediation is unavailable..

Prepared

Jun 29, 2026, 07:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.