CVE-2007-1699: Multiple PHP remote file inclusion vulnerabilities in the SWmenu (com_swmenupro and com_swmenufree) 4.0 com...

Security readout for executives and security teams

CVE-2007-1699 affects the SWmenu Free and Pro 4.0 component for Mambo and Joomla. A remote attacker may be able to make the component load attacker-controlled PHP, which can lead to server-side code execution. The source bundle does not provide CVSS, a confirmed patch, or evidence of active exploitation. Exposure is most likely on legacy Mambo or Joomla sites running com_swmenupro or com_swmenufree 4.0, especially if ImageManager.php is reachable from the internet. The structured affected-product metadata is incomplete, so asset validation should rely on component names and paths. Prioritize if any legacy Joomla or Mambo estate remains internet-facing. The business risk is potential website takeover or server compromise, but urgency depends on whether the old SWmenu component is actually present. Mitigation focus: Inventory Mambo and Joomla sites for SWmenu Free or Pro 4.0.; Check vendor or distribution guidance for a supported update or replacement.; Remove or disable the component if no supported fix is available..

Prepared

Jun 29, 2026, 06:37 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.