CVE-2007-6231: Multiple PHP remote file inclusion vulnerabilities in tellmatic 1.0.7 allow remote attackers to execute arb...

Security readout for executives and security teams

CVE-2007-6231 is an old tellmatic 1.0.7 issue where certain PHP include files may load attacker-controlled remote PHP code. If reachable, this can become server-side code execution. The CVE notes many Apache deployments block the affected include directory with .htaccess, which may reduce exposure. Exposure is most likely in legacy tellmatic 1.0.7 installations where include/ is web-accessible or .htaccess protection is absent, ignored, or bypassed. Apache deployments honoring the shipped .htaccess may be less exposed. Treat reachable deployments as urgent because the described impact is arbitrary PHP execution. Priority drops if tellmatic is absent or include/ access is demonstrably blocked, but legacy exposure should still be eliminated. Mitigation focus: Identify and remove unsupported tellmatic 1.0.7 deployments where possible.; Confirm include/ is not directly web-accessible in production.; Verify Apache honors .htaccess controls if relying on them..

Prepared

Jun 28, 2026, 19:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.