CVE-2007-3586
MyCMS < 0.9.8 - Remote Code Execution via Score Parameter or Login Cookie
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-3586. PoCs published by BlackHawk.
AI-analyzed exploit summary This exploit leverages a file inclusion vulnerability in MyCMS <= 0.9.8 to achieve remote command execution by writing a malicious PHP shell to the target system. It abuses insecure file handling in game score management and arbitrary file inclusion via the 'scoreid' parameter.
Description
Multiple direct static code injection vulnerabilities in MyCMS 0.9.8 and earlier allow remote attackers to inject arbitrary PHP code into (1) a _score.txt file via the score parameter, or (2) a _setby.txt file via a login cookie, which is then included by games.php. NOTE: programs that use games.php might include (a) snakep.php, (b) tetrisp.php, and possibly other site-specific files.
Exploits (1)
This exploit leverages a file inclusion vulnerability in MyCMS <= 0.9.8 to achieve remote command execution by writing a malicious PHP shell to the target system. It abuses insecure file handling in game score management and arbitrary file inclusion via the 'scoreid' parameter.