CVE-2007-3141: PHP remote file inclusion vulnerability in core/editor.php in phpWebThings 1.5.2 allows remote attackers to...

Security readout for executives and security teams

CVE-2007-3141 is a historical remote file inclusion issue in phpWebThings 1.5.2. If an exposed vulnerable site is still running, an attacker could cause the server to load attacker-controlled PHP and execute code. The source bundle does not provide a CVSS score, vendor fix, or active exploitation evidence. Exposure is likely limited to legacy phpWebThings 1.5.2 deployments reachable over HTTP. Modern environments are only affected if this old application or copied vulnerable code remains deployed. Treat as high priority only if phpWebThings 1.5.2 exists in your environment. The business risk is server compromise from a legacy web application. If the product is absent, no action is needed beyond documenting that finding. Mitigation focus: Identify and retire any phpWebThings 1.5.2 deployments.; Check vendor or maintainer guidance for a fixed release or replacement.; Remove public access until remediation status is confirmed..

Prepared

Jun 29, 2026, 05:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.