CVE-2007-2065: PHP remote file inclusion vulnerability in db/PollDB.php in Robert Ladstaetter ActionPoll 1.1.1 allows remo...

Security readout for executives and security teams

ActionPoll 1.1.1 reportedly lets an internet attacker make the application load PHP code from a remote URL. If true and reachable, this could become full server compromise. The record is old and explicitly says the provenance is unknown, so prioritize confirming whether the software exists in the environment. Exposure is likely limited to legacy deployments of Robert Ladstaetter ActionPoll 1.1.1, especially if publicly reachable and running PHP with remote inclusion behavior enabled. The supplied affected-product metadata is incomplete. Make this a targeted legacy exposure check, not a broad emergency. If ActionPoll 1.1.1 is found on a public server, remediation should be urgent because the reported impact is arbitrary PHP code execution. Mitigation focus: Inventory web servers for ActionPoll 1.1.1 or db/PollDB.php.; Remove or isolate unsupported ActionPoll deployments if found.; Check vendor or historical project guidance for any named fix..

Prepared

Jun 29, 2026, 06:10 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.