CVE-2007-2939: Multiple PHP remote file inclusion vulnerabilities in Mazen's PHP Chat 3.0.0 allow remote attackers to exec...

Security readout for executives and security teams

CVE-2007-2939 affects Mazen's PHP Chat 3.0.0. The reported flaw lets a remote attacker supply a URL through the basepath parameter and cause vulnerable PHP include files to load remote code, potentially leading to server-side code execution. Exposure is most likely limited to legacy Mazen's PHP Chat 3.0.0 installations, especially if the include/pear PHP files are reachable from the web. The bundle does not identify broader affected products or versions. Prioritize remediation if this software is internet-facing or supports any business process. The product is old, the reported impact is code execution, and public exploit material exists, but active exploitation is not established in the provided sources. Mitigation focus: Identify and remove unsupported Mazen's PHP Chat 3.0.0 deployments where possible.; Restrict public access to include/pear/ITX.php, IT_Error.php, and IT.php.; Check vendor and advisory references for any fixed release or official guidance..

Prepared

Jun 29, 2026, 05:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.