CVE-2007-2947: Multiple PHP remote file inclusion vulnerabilities in OpenBASE Alpha 0.6 allow remote attackers to execute...

Security readout for executives and security teams

CVE-2007-2947 is an old OpenBASE Alpha 0.6 issue where several PHP pages can be influenced to load remote PHP code. If an exposed installation still exists, a remote attacker could potentially run code on the web server. Exposure is most likely limited to legacy internet-facing OpenBASE Alpha 0.6 deployments or archived PHP applications containing those files. The bundle’s structured affected fields are incomplete, so confirm product identity from deployed code rather than relying only on CPE data. Prioritize investigation if any legacy OpenBASE Alpha site is internet-facing. The issue is old and may be rare, but confirmed exposure could mean server compromise risk. If the product is not present, no action is needed beyond asset-record cleanup. Mitigation focus: Check vendor or project guidance for a patched release or supported replacement.; Remove OpenBASE Alpha 0.6 from internet exposure until remediation is confirmed.; Retire or replace unsupported legacy OpenBASE deployments where feasible..

Prepared

Jun 29, 2026, 05:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.