CVE-2007-2140: PHP remote file inclusion vulnerability in everything.php in Franklin Huang Flip (aka Flip-search-add-on) 2...

Security readout for executives and security teams

CVE-2007-2140 is a remote file inclusion issue in Franklin Huang Flip, also called Flip-search-add-on 2.0. If the vulnerable PHP file is reachable, an attacker could make the application load remote PHP code and run it on the server. The available sources do not name a vendor patch or current exploitation. Exposure is likely limited to legacy Flip-search-add-on 2.0 deployments that still expose everything.php to untrusted users. The supplied affected-product metadata is incomplete, so asset owners must confirm product presence by code, filenames, and historical deployment records. Treat this as urgent only if the legacy component is present and reachable. The business risk is server compromise through arbitrary PHP execution, but the evidence does not show broad modern exposure or active exploitation. Mitigation focus: Identify and remove any exposed Flip-search-add-on 2.0 installations.; Check original vendor or maintainer guidance before assuming a patch exists.; If still required, restrict access to everything.php immediately..

Prepared

Jun 29, 2026, 06:10 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.