Vulnerabilities > CVE-2007-3529 - Information Disclosure vulnerability in PHPDirector

047910
CVSS 7.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
NONE
Availability impact
NONE
network
low complexity
phpdirector
exploit available
NVD
Published: 2007-07-03
Updated: 2018-10-15

Summary

videos.php in PHPDirector 0.21 and earlier allows remote attackers to obtain sensitive information via an empty value of the id[] parameter, which reveals the path in an error message.

Vulnerable Configurations

Part Description Count
Application
Phpdirector
1

Exploit-Db

descriptionPHPDirector <= 0.21 (videos.php id) Remote SQL Injection Vulnerability. CVE-2007-3529,CVE-2007-3530,CVE-2007-3562. Webapps exploit for php platform
fileexploits/php/webapps/4139.txt
idEDB-ID:4139
last seen2016-01-31
modified2007-07-02
platformphp
port
published2007-07-02
reporterKw3[R]Ln
sourcehttps://www.exploit-db.com/download/4139/
titlePHPDirector <= 0.21 videos.php id Remote SQL Injection Vulnerability
typewebapps

References