PatchTheCVEphpdirector vulnerabilities and fixes
Recent CVEs affecting phpdirector, with upgrade or downgrade steps. 2 tracked.
phpdirector has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2007-07-03. Highest priority: CVE-2007-3529 (score 54/100).
- CVE-2007-3530 HIGH 7.2 UPGRADE PHPDirector 0.21 and earlier stores the admin account name and password in config.php, which allows local user
- CVE-2007-3529 HIGH 7.8 UPGRADE videos.php in PHPDirector 0.21 and earlier allows remote attackers to obtain sensitive information via an empt
FAQ
How do I fix phpdirector vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is phpdirector being exploited right now?
None of the tracked phpdirector CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which phpdirector CVE should I patch first?
CVE-2007-3529 currently ranks highest (54/100): videos.php in PHPDirector 0.21 and earlier allows remote attackers to obtain sensitive information via an empt.