CVE-2007-0167
- State
- Published
- Severity
- Not scored
- Published
- Jan 10, 2007
- Updated
- Aug 7, 2024
- Reserved
- Jan 9, 2007
Description
Multiple PHP file inclusion vulnerabilities in WGS-PPC (aka PPC Search Engine), as distributed with other aliases, allow remote attackers to execute arbitrary PHP code via a URL in the INC parameter in (1) config_admin.php, (2) config_main.php, (3) config_member.php, and (4) mysql_config.php in config/; (5) admin.php and (6) index.php in admini/; (7) paypalipn/ipnprocess.php; (8) index.php and (9) registration.php in members/; and (10) ppcbannerclick.php and (11) ppcclick.php in main/.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 3104exploit
- 33449vdb-entry
- 33445vdb-entry
- 2134third-party-advisory
- 33447vdb-entry
- 33454vdb-entry
- 21961vdb-entry
- 20070109 ppc engine Multiple file inclusionmailing-list
- 20070109 "ppc engine" is WGS-PPCmailing-list
- 33450vdb-entry
- 33444vdb-entry
- 33448vdb-entry
- demoppc-inc-file-include(31355)vdb-entry
- 33451vdb-entry
- 33452vdb-entry
- 33446vdb-entry
- 33453vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.