CVE-2008-7067: PHP remote file inclusion vulnerability in admin/plugins/Online_Users/main.php in PageTree CMS 0.0.2 BETA 0...

Security readout for executives and security teams

CVE-2008-7067 is a remote file inclusion flaw in PageTree CMS 0.0.2 BETA 0001. If a vulnerable site is exposed, an attacker may be able to make the application load remote PHP code and run it on the server. The sources do not provide a CVSS score, confirmed patch, or evidence of active exploitation. Exposure is most likely limited to legacy deployments of PageTree CMS 0.0.2 BETA 0001, especially internet-facing sites with the admin plugin path reachable. The affected metadata is incomplete, so teams should confirm by product inventory and filesystem review rather than relying on CPE matching. Treat as urgent only if PageTree CMS 0.0.2 BETA 0001 is present. The vulnerability can enable remote code execution, but the product appears old and exposure should be verified first. No active exploitation evidence is provided in the bundle. Mitigation focus: Identify and retire any PageTree CMS 0.0.2 BETA 0001 deployments.; If still present, restrict access to admin paths immediately.; Check vendor or maintainer guidance; no patch is named in the supplied sources..

Prepared

Jun 28, 2026, 10:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.