CVE-2007-6347: PHP remote file inclusion vulnerability in blocks/block_site_map.php in ViArt (1) CMS 3.3.2, (2) HelpDesk 3...

Security readout for executives and security teams

CVE-2007-6347 affects older ViArt web applications. A vulnerable PHP file may accept a user-supplied URL and include remote code, which can lead to server-side PHP code execution. The source bundle does not provide CVSS, a named patch, or active exploitation evidence. Exposure is most likely where ViArt 3.3.2 applications are internet-facing and include blocks/block_site_map.php. The bundle lists affected products but provides no CPEs or vendor-normalized affected range, so asset confirmation is required. Prioritize any internet-facing ViArt 3.3.2 deployment because the reported impact is arbitrary PHP code execution. Urgency is lower where the product is absent, retired, or not reachable externally. Mitigation focus: Identify any ViArt 3.3.2 CMS, HelpDesk, Shop Evaluation, or Shop Free deployments.; Check ViArt or trusted vendor guidance for fixed versions or supported migration paths.; Temporarily restrict public access to affected deployments until remediation is confirmed..

Prepared

Jun 28, 2026, 19:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.