CVE-2007-1628: Multiple PHP remote file inclusion vulnerabilities in Study planner (Studiewijzer) 0.15 and earlier, when r...

Security readout for executives and security teams

This is a legacy Study planner (Studiewijzer) flaw that can let an attacker run PHP code on the server if version 0.15 or earlier is exposed and PHP register_globals is enabled. The bundle does not show a vendor patch or active exploitation evidence. Exposure is likely limited to organizations still running the old Study planner application, especially internet-facing PHP deployments with register_globals enabled. The affected product and version details in the bundle are sparse beyond Study planner 0.15 and earlier. Prioritize remediation if any legacy Study planner instance is still reachable. The business risk is server compromise through code execution, but urgency depends on whether the old application and vulnerable PHP setting exist in your environment. Mitigation focus: Inventory for Study planner or Studiewijzer installations.; Remove or isolate version 0.15 and earlier from public access.; Disable PHP register_globals where present..

Prepared

Jun 29, 2026, 06:37 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.