CVE-2007-1837: Multiple PHP remote file inclusion vulnerabilities in MangoBery CMS 0.5.5 allow remote attackers to execute...

Security readout for executives and security teams

This flaw affects MangoBery CMS 0.5.5 and could let a remote attacker make the site load attacker-controlled PHP through a parameter. If exploitable on an internet-facing site, the business impact could include full web application compromise. Evidence of active exploitation is not provided, but a public exploit reference exists. Likely limited to organizations still running legacy MangoBery CMS 0.5.5 or deployed code derived from it, especially if the named PHP files are reachable from untrusted networks. Treat as high priority if MangoBery CMS is present on an exposed system. For most modern environments, priority is inventory-driven because the affected product is old and may not exist in the estate. Mitigation focus: Identify and prioritize any MangoBery CMS 0.5.5 deployments.; Check vendor or project guidance before selecting a patch path.; Retire or replace unsupported MangoBery CMS instances where no maintained fix exists..

Prepared

Jun 29, 2026, 06:24 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.