CVE-2007-1721: Multiple PHP remote file inclusion vulnerabilities in C-Arbre 0.6PR7 and earlier allow remote attackers to...

Security readout for executives and security teams

CVE-2007-1721 is a remote file inclusion issue in C-Arbre 0.6PR7 and earlier. A remote attacker could make the application load attacker-controlled PHP through the root_path parameter, leading to arbitrary PHP code execution. This is mainly a legacy-software risk, but exposed instances should be treated seriously. Exposure is likely limited to legacy C-Arbre 0.6PR7 or earlier installations, especially internet-facing PHP deployments. The source bundle lacks package identifiers and affected CPEs, so asset discovery must rely on application inventory, file paths, and version evidence. Prioritize remediation if any affected C-Arbre instance is internet-facing. The issue can lead to remote code execution, but available evidence points to an old, specific product with incomplete modern exposure data. Mitigation focus: Identify any C-Arbre 0.6PR7 or earlier installations.; Remove or isolate exposed affected installations until remediated.; Check vendor or maintainer guidance for a fixed release..

Prepared

Jun 29, 2026, 06:37 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.