VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 5, 2007· Updated Jun 16, 2026

CVE-2007-3587

CVE-2007-3587

Description

MyCMS 0.9.8 and earlier allows remote attackers to gain privileges via the admin cookie parameter, as demonstrated by a post to admin/settings.php that injects PHP code into settings.inc, which can then be executed via a direct request to index.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Mycms/Mycms2 versions
    cpe:2.3:a:mycms:mycms:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mycms:mycms:*:*:*:*:*:*:*:*range: <=0.9.8
    • (no CPE)range: <=0.9.8

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.