CVE-2007-1976: PHP remote file inclusion vulnerability in index.php in the Virii Info 1.10 and earlier module for Xoops al...

Security readout for executives and security teams

CVE-2007-1976 is an old, disputed report involving the XOOPS Virii Info module 1.10 and earlier. The claim is that a remote file inclusion issue could allow arbitrary PHP execution. The CVE record notes a reliable third party disputed the report because XOOPS checkSuperglobals may block the attack path. Exposure is likely limited to legacy XOOPS installations that still run the Virii Info module version 1.10 or earlier. The provided structured affected-product data is incomplete, so asset confirmation is required before assigning business risk. Low immediate urgency unless legacy XOOPS with this module is exposed to the internet. Prioritize quick inventory and removal of unsupported code over emergency response, because exploitation is disputed and active exploitation is not evidenced here. Mitigation focus: Inventory XOOPS sites for the Virii Info module and version.; Check XOOPS and module maintainer guidance for any clarified fix or replacement.; Disable or remove the module if it is unused or unsupported..

Prepared

Jun 29, 2026, 06:24 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.