CVE-2007-1809: Multiple PHP remote file inclusion vulnerabilities in GraFX Company WebSite Builder (CWB) PRO 1.5 allow rem...

Security readout for executives and security teams

CVE-2007-1809 is an old remote file inclusion issue in GraFX Company WebSite Builder PRO 1.5. A remote attacker could potentially make the application load attacker-controlled PHP through an INCLUDE_PATH parameter, leading to arbitrary PHP code execution on the server. Exposure is likely limited to legacy internet-facing installations of GraFX CWB PRO 1.5. Modern environments are unlikely to run it, but any remaining public PHP deployment should be treated as high risk until verified absent or isolated. Prioritize confirmation and removal if this software exists. The business risk is server compromise from a legacy web application, but urgency depends on whether CWB PRO 1.5 is actually deployed and reachable. Mitigation focus: Identify and retire any CWB PRO 1.5 installations.; Check vendor or archive guidance for any official fix.; Remove public access to affected PHP paths if still present..

Prepared

Jun 29, 2026, 06:24 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.