Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-3587. PoCs published by BlackHawk.
AI-analyzed exploit summary This exploit targets a remote command execution vulnerability in MyCMS <= 0.9.8 by bypassing authentication via cookie manipulation and injecting PHP code into settings.inc. It creates a backdoor shell (piggy_marty.php) for arbitrary command execution.
Description
MyCMS 0.9.8 and earlier allows remote attackers to gain privileges via the admin cookie parameter, as demonstrated by a post to admin/settings.php that injects PHP code into settings.inc, which can then be executed via a direct request to index.php.
Exploits (1)
This exploit targets a remote command execution vulnerability in MyCMS <= 0.9.8 by bypassing authentication via cookie manipulation and injecting PHP code into settings.inc. It creates a backdoor shell (piggy_marty.php) for arbitrary command execution.