CVE-2007-4094: PHP remote file inclusion vulnerability in library/authorize.php in IDevSpot PhpHostBot allows remote attac...

Security readout for executives and security teams

CVE-2007-4094 is a remote file inclusion issue in IDevSpot PhpHostBot. If the affected script is exposed, a remote attacker may be able to make the application load attacker-controlled PHP and execute code on the server. Exposure is likely limited to organizations still running IDevSpot PhpHostBot with library/authorize.php reachable by untrusted users. The sources do not identify affected versions or maintained vendor packages. Treat this as a high-priority legacy application risk if PhpHostBot exists in your environment. The issue can lead to server-side code execution, but the available sources do not confirm current exploitation or a named patch. Mitigation focus: Identify whether IDevSpot PhpHostBot is deployed or publicly reachable.; Remove, retire, or isolate affected PhpHostBot instances where possible.; Check vendor or maintainer guidance for any fixed release or official workaround..

Prepared

Jun 29, 2026, 04:20 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.