CVE-2007-3585
MyCMS <0.9.8 - RCE
Title source: llmDescription
PHP remote file inclusion vulnerability in games.php in MyCMS 0.9.8 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the id parameter.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by BlackHawk · phpwebappsphp
https://www.exploit-db.com/exploits/4144
Scores
EPSS
0.0534
EPSS Percentile
90.1%
Details
Status
published
Products (1)
mycms/mycms
< 0.9.8
Published
Jul 05, 2007
Tracked Since
Feb 18, 2026