CVE-2007-4715: Multiple PHP remote file inclusion vulnerabilities in Weblogicnet allow remote attackers to execute arbitra...

Security readout for executives and security teams

CVE-2007-4715 describes a Weblogicnet PHP flaw that can let a remote attacker make the application load attacker-controlled PHP through a URL parameter. If the vulnerable scripts are publicly reachable, compromise could mean server-side code execution. The source bundle does not identify affected versions or a vendor fix. Exposure appears limited to deployments of the vulnerable Weblogicnet PHP application where es_desp.php, es_custom_menu.php, or es_offer.php are reachable. The bundle lists affected vendor, product, and versions as n/a, so asset identification requires file-level validation. Prioritize discovery over broad emergency action. This is old and lacks active exploitation evidence, but the described impact is remote code execution. Internet-facing legacy PHP systems should be checked promptly. Mitigation focus: Identify and remove any exposed vulnerable Weblogicnet installation.; Restrict public access to the named PHP scripts if still present.; Check vendor or maintainer guidance for any available fixed release..

Prepared

Jun 29, 2026, 03:38 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.