Vulnerability Details CVE-2007-3530
PHPDirector 0.21 and earlier stores the admin account name and password in config.php, which allows local users to gain privileges by reading this file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 32.9%
CVSS Severity
CVSS v2 Score 7.2
References
- http://osvdb.org/39718
- http://www.exploit-db.com/exploits/4139
- http://www.securityfocus.com/archive/1/472661/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35222
- http://osvdb.org/39718
- http://www.exploit-db.com/exploits/4139
- http://www.securityfocus.com/archive/1/472661/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35222
Products affected by CVE-2007-3530
-
cpe:2.3:a:phpdirector:phpdirector:*