Lucene search

K
nvd[email protected]NVD:CVE-2007-3530
HistoryJul 03, 2007 - 6:30 p.m.

CVE-2007-3530

2007-07-0318:30:00
web.nvd.nist.gov
5

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

High

EPSS

0

Percentile

5.1%

PHPDirector 0.21 and earlier stores the admin account name and password in config.php, which allows local users to gain privileges by reading this file.

Affected configurations

Nvd
Node
phpdirectorphpdirectorRange0.21
VendorProductVersionCPE
phpdirectorphpdirector*cpe:2.3:a:phpdirector:phpdirector:*:*:*:*:*:*:*:*

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

High

EPSS

0

Percentile

5.1%

Related for NVD:CVE-2007-3530