CVE-2007-3530 PHPDirector 0.21 and earlier stores the admin account name and password in config.php, which allows local users to gain privileges by reading this file.
HighCVSS 7.2
EPSS 0.84%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHPDirector 0.21 and earlier stores the admin account name and password in config.php, which allows local users to gain privileges by reading this file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpdirector | <= 0.21 | No fix listed |
References
- 39718 vdb-entry
- 4139 exploit
- 20070702 PHPDirector <= 0.21 (SQL injection/Upload SHELL) Remote Vulnerabilities mailing-list
- phpdirector-cmd-file-upload(35222) vdb-entry