CVE-2007-2064: Multiple PHP remote file inclusion vulnerabilities in Robert Ladstaetter ActionPoll 1.1.0, and possibly 1.1...

Security readout for executives and security teams

This is an old remote file inclusion issue in ActionPoll. If a vulnerable ActionPoll script is still exposed, an attacker could make the PHP application load attacker-controlled code. The sources name ActionPoll 1.1.0 and possibly 1.1.1, but do not provide modern severity scoring or confirmed active exploitation. Exposure is most likely in legacy, internet-facing sites that still host Robert Ladstaetter ActionPoll 1.1.0, or possibly 1.1.1. Modern environments are only exposed if old ActionPoll files remain deployed and reachable. Treat as a high-priority legacy exposure check, not a broad enterprise emergency. The business risk is severe only where this old PHP polling software remains publicly reachable. Mitigation focus: Inventory public web roots for ActionPoll files and remove unused deployments.; If still required, restrict access until vendor guidance or a safe replacement is confirmed.; Check vendor or archival project guidance for any fixed ActionPoll release..

Prepared

Jun 29, 2026, 06:10 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.