{
    "id": "CVE-2007-0167",
    "published": "2007-01-10 01:28:00",
    "last_modified": "2026-06-16 22:35:02",
    "cvss_score": "7.5",
    "cvss_severity": "HIGH",
    "cvss_version": "2.0",
    "cvss_vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
    "cwe": null,
    "description": "Multiple PHP file inclusion vulnerabilities in WGS-PPC (aka PPC Search Engine), as distributed with other aliases, allow remote attackers to execute arbitrary PHP code via a URL in the INC parameter in (1) config_admin.php, (2) config_main.php, (3) config_member.php, and (4) mysql_config.php in config/; (5) admin.php and (6) index.php in admini/; (7) paypalipn/ipnprocess.php; (8) index.php and (9) registration.php in members/; and (10) ppcbannerclick.php and (11) ppcclick.php in main/.",
    "epss_score": "0.10282",
    "epss_percentile": "0.95567",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-10-03 18:17:06",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "ppc_search_engine",
            "product": "ppc_search_engine"
        },
        {
            "vendor": "wgs-ppc",
            "product": "wgs-ppc"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "3104",
            "title": "PPC Search Engine 1.61 - 'INC' Multiple Remote File Inclusions",
            "date": "2007-01-09",
            "url": "https://www.exploit-db.com/exploits/3104"
        }
    ],
    "refs_list": [
        "http://securityreason.com/securityalert/2134",
        "http://www.attrition.org/pipermail/vim/2007-January/001221.html",
        "http://www.osvdb.org/33444",
        "http://www.osvdb.org/33445",
        "http://www.osvdb.org/33446",
        "http://www.osvdb.org/33447",
        "http://www.osvdb.org/33448",
        "http://www.osvdb.org/33449",
        "http://www.osvdb.org/33450",
        "http://www.osvdb.org/33451",
        "http://www.osvdb.org/33452",
        "http://www.osvdb.org/33453",
        "http://www.osvdb.org/33454",
        "http://www.securityfocus.com/archive/1/456386/100/0/threaded",
        "http://www.securityfocus.com/bid/21961",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/31355",
        "https://www.exploit-db.com/exploits/3104",
        "http://securityreason.com/securityalert/2134",
        "http://www.attrition.org/pipermail/vim/2007-January/001221.html",
        "http://www.osvdb.org/33444",
        "http://www.osvdb.org/33445",
        "http://www.osvdb.org/33446",
        "http://www.osvdb.org/33447",
        "http://www.osvdb.org/33448",
        "http://www.osvdb.org/33449"
    ]
}