CVE-2007-1123: Multiple PHP remote file inclusion vulnerabilities in ZPanel 2.0 allow remote attackers to execute arbitrar...

Security readout for executives and security teams

CVE-2007-1123 describes reported remote file inclusion issues in ZPanel 2.0. If reachable, an attacker could cause the application to load attacker-controlled PHP and potentially run code on the server. The record is old and explicitly says its provenance is unknown, so confirm exposure before prioritizing broad response. Exposure is likely limited to legacy ZPanel 2.0 deployments or archived code still reachable on PHP-capable web servers. The affected metadata is incomplete, so validate by asset inventory and application fingerprinting rather than product assumptions. Treat confirmed internet-facing ZPanel 2.0 as urgent legacy risk because the reported impact is remote code execution. Do not assume enterprise-wide exposure without inventory evidence, and note that source confidence is limited. Mitigation focus: Identify and decommission any reachable ZPanel 2.0 instances.; Check vendor or archived project guidance for any available fixed version.; Restrict external access while confirming whether the application is still required..

Prepared

Jun 29, 2026, 07:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.