CVE-2007-1787: Multiple PHP remote file inclusion vulnerabilities in lib/timesheet.class.php in Softerra Time-Assistant 6....

Security readout for executives and security teams

CVE-2007-1787 is a legacy remote code execution risk in Softerra Time-Assistant 6.2 and earlier. If the application runs with PHP register_globals enabled, attackers can influence include paths and cause the server to run attacker-controlled PHP code. Internet-facing legacy deployments should be treated as high risk. Exposure is likely limited to organizations still running Softerra Time-Assistant 6.2 or earlier on old PHP configurations with register_globals enabled, especially if reachable from untrusted networks. Prioritize discovery and containment of any exposed legacy Time-Assistant deployment. The issue can lead to server-side code execution, but urgency depends on whether this obsolete product and unsafe PHP setting still exist. Mitigation focus: Inventory and remove unsupported Softerra Time-Assistant deployments where possible.; Disable PHP register_globals on any host running the application.; Restrict external access to legacy Time-Assistant instances until resolved..

Prepared

Jun 29, 2026, 06:37 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.