CVE-2007-3980
RCMS Pro RGameScript Pro - Remote File Inclusion via Page.php ID Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-3980. PoCs published by Warpboy.
AI-analyzed exploit summary This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in RCMS-Pro. The PoC shows how an attacker can include a remote shell by manipulating the 'id' parameter in the 'page.php' file.
Description
PHP remote file inclusion vulnerability in page.php in RCMS Pro RGameScript Pro allows remote attackers to execute arbitrary PHP code via a URL in the id parameter.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Warpboy · textwebappsphp
https://www.exploit-db.com/exploits/4210
This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in RCMS-Pro. The PoC shows how an attacker can include a remote shell by manipulating the 'id' parameter in the 'page.php' file.
Classification
Working Poc 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target:
RCMS-Pro
No auth needed
Prerequisites:
A vulnerable version of RCMS-Pro · Ability to host a malicious shell file on a remote server
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/39108
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/24995
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/35541
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2007/2614
Exploit, Third Party Advisory exploit
x_refsource_exploit-db
https://www.exploit-db.com/exploits/4210
Scores
EPSS
0.0437
EPSS Percentile
89.1%
Details
Status
published
Products (1)
rcms_pro/rgamescript_pro
0
Published
Jul 25, 2007
Tracked Since
Feb 18, 2026