CVE-2007-5631: Multiple PHP remote file inclusion vulnerabilities in PeopleAggregator 1.2pre6, when register_globals is en...

Security readout for executives and security teams

CVE-2007-5631 affects PeopleAggregator 1.2pre6 systems running PHP with register_globals enabled. The flaw can let a remote attacker cause the application to include attacker-controlled PHP, which may lead to server-side code execution. The sources do not provide CVSS, affected CPEs, or a named fixed version. Exposure is likely limited to legacy PeopleAggregator 1.2pre6 deployments with register_globals enabled and the listed modules or components reachable over the web. No evidence in the bundle establishes exposure for other versions or products. Prioritize remediation if any internet-facing PeopleAggregator 1.2pre6 instance remains in service. The vulnerability is old, but remote code execution impact is material. If the product is not present, document non-exposure and no further action is needed. Mitigation focus: Check vendor or maintainer guidance for any fixed release or patch.; Disable PHP register_globals wherever this application still runs.; Remove, isolate, or retire PeopleAggregator 1.2pre6 deployments..

Prepared

Jun 29, 2026, 02:08 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.