AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2007-0167

HIGH · CVSS 7.5 EPSS 10.10% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2007-01-10 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

Exhibit — Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

External Security References
exploit-db.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2007-0167
Severity
HIGH
CVSS
7.5
EPSS
10.10%

Original Filing — NVD Description

Multiple PHP file inclusion vulnerabilities in WGS-PPC (aka PPC Search Engine), as distributed with other aliases, allow remote attackers to execute arbitrary PHP code via a URL in the INC parameter in (1) config_admin.php, (2) config_main.php, (3) config_member.php, and (4) mysql_config.php in config/; (5) admin.php and (6) index.php in admini/; (7) paypalipn/ipnprocess.php; (8) index.php and (9) registration.php in members/; and (10) ppcbannerclick.php and (11) ppcclick.php in main/.