Vulnerabilities > CVE-2007-3530 - Local Security vulnerability in PHPDirector

047910
CVSS 7.2 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
low complexity
phpdirector
exploit available
NVD
Published: 2007-07-03
Updated: 2018-10-15

Summary

PHPDirector 0.21 and earlier stores the admin account name and password in config.php, which allows local users to gain privileges by reading this file.

Vulnerable Configurations

Part Description Count
Application
Phpdirector
1

Exploit-Db

descriptionPHPDirector <= 0.21 (videos.php id) Remote SQL Injection Vulnerability. CVE-2007-3529,CVE-2007-3530,CVE-2007-3562. Webapps exploit for php platform
fileexploits/php/webapps/4139.txt
idEDB-ID:4139
last seen2016-01-31
modified2007-07-02
platformphp
port
published2007-07-02
reporterKw3[R]Ln
sourcehttps://www.exploit-db.com/download/4139/
titlePHPDirector <= 0.21 videos.php id Remote SQL Injection Vulnerability
typewebapps

References