CVE-2007-5054: Multiple PHP remote file inclusion vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers...

Security readout for executives and security teams

CVE-2007-5054 affects old iziContents CMS versions, 1 RC6 and earlier. Several PHP module pages can accept a remote URL through the gsLanguage parameter, allowing an attacker to make the server run attacker-supplied PHP code. The bundle does not provide a CVSS score or confirmed active exploitation. Exposure is most likely limited to internet-facing legacy iziContents 1 RC6 or earlier installations, especially if the listed modules are reachable. Organizations without this CMS are not affected based on the supplied sources. Treat this as urgent if any legacy iziContents deployment is exposed. Remote code execution against a web CMS can lead to site takeover or server compromise, but relevance depends entirely on whether this obsolete product exists in the environment. Mitigation focus: Inventory public sites for iziContents 1 RC6 or earlier.; Check vendor or archive guidance for supported fixed versions.; Decommission unsupported iziContents deployments where feasible..

Prepared

Jun 29, 2026, 03:11 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.