CVE-2007-3586 - CVE House
Back to Database
Status published High CVE-2007-3586

Multiple direct static code injection vulnerabilities in MyCMS 0.9.8 and...

Vulnerability Description

Multiple direct static code injection vulnerabilities in MyCMS 0.9.8 and earlier allow remote attackers to inject arbitrary PHP code into (1) a _score.txt file via the score parameter, or (2) a _setby.txt file via a login cookie, which is then included by games.php. NOTE: programs that use games.php might include (a) snakep.php, (b) tetrisp.php, and possibly other site-specific files.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-3586

Credits & Attribution

No credits recorded in the NVD database.

References

More from mycms

View All →
CVE-2007-3587
MyCMS 0.9.8 and earlier allows remote attackers to gain privileges...
High 7.5
CVE-2007-3585
PHP remote file inclusion vulnerability in games.php in MyCMS 0.9.8...
High 7.5

Affected Vendor

Affected Software

mycms
Vulnerable Versions:
0

Timeline

Official Publish: July 5th, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.