CVE-2007-1908: PHP file inclusion vulnerability in php121db.php in PHP121 Instant Messenger 2.2 allows remote attackers to...

Security readout for executives and security teams

This is an old PHP121 Instant Messenger 2.2 issue where a web parameter can make the application include unintended PHP files. If a vulnerable instance is reachable, an attacker could run PHP code on the server. The source bundle does not provide CVSS, patch status, or evidence of current active exploitation. Exposure is likely limited to legacy PHP121 Instant Messenger 2.2 installations with php121db.php reachable over the web. Modern exposure may be uncommon, but any internet-facing instance should be treated as serious because the stated impact is arbitrary PHP code execution. Prioritize quickly if any PHP121 Instant Messenger 2.2 instance is internet-facing or on a sensitive server. The business risk is server compromise, but urgency depends on whether this legacy software is actually present. Mitigation focus: Identify any PHP121 Instant Messenger 2.2 deployments.; Check vendor or archived advisory guidance for an official fix.; Remove or retire PHP121 if it is no longer business-required..

Prepared

Jun 29, 2026, 06:24 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.