CVE-2007-1982: Multiple PHP remote file inclusion vulnerabilities in Really Simple PHP and Ajax (RSPA) 2007-03-23 and earl...

Security readout for executives and security teams

RSPA versions from 2007-03-23 and earlier contain PHP file inclusion flaws that can let a remote attacker make the server run attacker-controlled PHP code. This matters only where the old RSPA framework is still deployed and reachable. Exposure is likely limited to legacy PHP sites still using RSPA 2007-03-23 or earlier. Public-facing deployments are the primary concern. The source bundle lists affected vendor/product fields as n/a, so asset discovery must rely on application code and paths. Prioritize discovery over broad remediation. If RSPA is not present, business risk is low. If an internet-facing instance exists, treat it as high priority because the documented impact is remote PHP code execution and public exploit material is referenced. Mitigation focus: Identify and retire any RSPA 2007-03-23 or earlier deployments.; Check vendor or project guidance for an official fix or safe replacement.; Remove public access to vulnerable controller files if still present..

Prepared

Jun 29, 2026, 06:24 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.