high7.2Public exploit code
CVE-2007-3530
PHPDirector 0.21 and earlier stores the admin account name and password in config.php, which allows local users to gain privileges by reading this file.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHPDirector 0.21 - 'videos.php?id' SQL Injection2007-07-02 · webapps · php · Verified
Impact
PHPDirector 0.21 and earlier stores the admin account name and password in config.php, which allows local users to gain privileges by reading this file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpdirector | Phpdirector | through 0.21 |
References
- NVD record
- CVE.org record
- http://osvdb.org/39718
- http://www.exploit-db.com/exploits/4139
- http://www.securityfocus.com/archive/1/472661/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35222
- http://osvdb.org/39718
- http://www.exploit-db.com/exploits/4139
- http://www.securityfocus.com/archive/1/472661/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35222