CVE-2007-6178: Multiple PHP remote file inclusion vulnerabilities in Easy Hosting Control Panel for Ubuntu (EHCP) 0.22.8 a...

Security readout for executives and security teams

EHCP 0.22.8 and earlier has remote file inclusion flaws in two PHP utility files. If those files are reachable, an attacker could make the server load attacker-controlled PHP, leading to code execution. The bundle provides no CVSS score, no fixed version, and no evidence of active exploitation. Exposure is most likely on internet-facing EHCP 0.22.8 or earlier installations where config/dbutil.php or config/dbutil.bck.php remains web-accessible. Treat as high priority for any live EHCP deployment because the impact is remote code execution. Urgency depends on whether the obsolete affected version and reachable utility files exist in your environment. Mitigation focus: Check EHCP vendor or project guidance for fixed versions or official remediation.; Upgrade or retire EHCP 0.22.8 and earlier if a supported fix exists.; Block public web access to the affected config/ utility files..

Prepared

Jun 28, 2026, 19:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.