CVE-2007-2084: PHP remote file inclusion vulnerability in MobilePublisherphp 1.1.2 allows remote attackers to execute arbi...

Security readout for executives and security teams

This is an old reported flaw in MobilePublisherphp 1.1.2 where an attacker allegedly could make admin pages load remote PHP code. The CVE also records a dispute: a reliable third party said the variable was defined before use, which may prevent the issue. Exposure is limited to organizations still running MobilePublisherphp 1.1.2 with the affected admin PHP pages reachable. The supplied data does not identify CPEs or modern package names, so discovery likely requires asset inventory and source inspection. Do not prioritize above currently exploited vulnerabilities unless this legacy software is present and exposed. If found, removal or isolation should be scheduled promptly because unsupported PHP applications create broad operational risk. Mitigation focus: Identify and retire any remaining MobilePublisherphp 1.1.2 deployments.; Restrict admin directories to trusted networks and authenticated administrators.; Check vendor or project archives for guidance; no fix is named here..

Prepared

Jun 29, 2026, 06:10 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.