How severe is CVE-2007-0167?

CVE-2007-0167 has a CVSS 2.0 base score of 7.5, rated high severity.

Is CVE-2007-0167 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 10% (95th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2007-0167?

CVE-2007-0167 primarily affects Ppc Search Engine. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2007-0167?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2007-0167 published?

CVE-2007-0167 was published on 2007-01-10 and last updated on 2026-06-16.

CVE-2007-0167

CVE-2007-0167 is a high-severity vulnerability in Ppc Search Engine with a CVSS 2.0 base score of 7.5. Its EPSS exploit-prediction score of 10% places it in the 95th percentile, indicating an elevated likelihood of exploitation.

Key facts

Severity: High (CVSS 2.0 base score 7.5)
EPSS exploit prediction: 10% (95th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Ppc Search Engine
Published: 2007-01-10
Last modified: 2026-06-16

Description

Multiple PHP file inclusion vulnerabilities in WGS-PPC (aka PPC Search Engine), as distributed with other aliases, allow remote attackers to execute arbitrary PHP code via a URL in the INC parameter in (1) config_admin.php, (2) config_main.php, (3) config_member.php, and (4) mysql_config.php in config/; (5) admin.php and (6) index.php in admini/; (7) paypalipn/ipnprocess.php; (8) index.php and (9) registration.php in members/; and (10) ppcbannerclick.php and (11) ppcclick.php in main/.

Frequently asked questions

What is CVE-2007-0167?: Multiple PHP file inclusion vulnerabilities in WGS-PPC (aka PPC Search Engine), as distributed with other aliases, allow remote attackers to execute arbitrary PHP code via a URL in the INC parameter in (1) config_admin.php, (2) config_main.php, (3) config_member.php, and (4) mysql_config.php in config/; (5) admin.php and (6) index.php in admini/; (7) paypalipn/ipnprocess.php; (8) index.php and (9) registration.php in members/; and (10) ppcbannerclick.php and (11) ppcclick.php in main/.
How severe is CVE-2007-0167?: CVE-2007-0167 has a CVSS 2.0 base score of 7.5, rated high severity.
Is CVE-2007-0167 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 10% (95th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2007-0167?: CVE-2007-0167 primarily affects Ppc Search Engine. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2007-0167?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2007-0167 published?: CVE-2007-0167 was published on 2007-01-10 and last updated on 2026-06-16.

References

Affected products (2)

cpe:2.3:a:ppc_search_engine:ppc_search_engine:1.61:*:*:*:*:*:*:*
cpe:2.3:a:wgs-ppc:wgs-ppc:*:*:*:*:*:*:*:*