CVE-2007-3529 videos.php in PHPDirector 0.21 and earlier allows remote attackers to obtain sensitive information via an empty value of the id[] parameter, which reveals the path in an error message.
HighCVSS 7.8
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
videos.php in PHPDirector 0.21 and earlier allows remote attackers to obtain sensitive information via an empty value of the id[] parameter, which reveals the path in an error message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpdirector | <= 0.21 | No fix listed |
References
- 39717 vdb-entry
- 4139 exploit
- 20070702 PHPDirector <= 0.21 (SQL injection/Upload SHELL) Remote Vulnerabilities mailing-list
- phpdirector-videos-information-disclosure(35221) vdb-entry