CVE-2007-2169: Static code injection vulnerability in add.php in Mozzers SubSystem 1.0 allows remote attackers to inject P...

Security readout for executives and security teams

CVE-2007-2169 is a legacy web application flaw in Mozzers SubSystem 1.0. A remote attacker could submit PHP code through subscription name or URL fields, causing code to be written into subs.php. If that file is executed by the server, the issue could become server-side code execution. Exposure is limited to organizations still running Mozzers SubSystem 1.0 or remnants of it on public PHP hosting. The source bundle does not identify broader affected vendors, maintained forks, or current package names. Prioritize remediation if any internet-facing instance exists. The technology is old, severity metadata is incomplete, and public exploit information is referenced. If the product is not present, business urgency is low. Mitigation focus: Check vendor or maintainer guidance for any official fix or replacement.; Retire or isolate Mozzers SubSystem 1.0 if it is still deployed.; Restrict public access to add.php and the related add action where possible..

Prepared

Jun 29, 2026, 06:10 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.