CVE-2007-3530

2007-07-0318:00:00

mitre

www.cve.org

AI Score

6.7

Confidence

High

EPSS

Percentile

5.1%

JSON

PHPDirector 0.21 and earlier stores the admin account name and password in config.php, which allows local users to gain privileges by reading this file.

References

osvdb.org/39718

www.exploit-db.com/exploits/4139

www.securityfocus.com/archive/1/472661/100/0/threaded

exchange.xforce.ibmcloud.com/vulnerabilities/35222