CVE-2007-3529: Phpdirector

High severity, CVSS 7.8. EPSS: 2.7% chance of exploitation in the next 30 days.

videos.php in PHPDirector 0.21 and earlier allows remote attackers to obtain sensitive information via an empty value of the id[] parameter, which reveals the path in an error message.

Affected products

• Phpdirector Phpdirector: up to and including 0.21

Published 2007-07-03. Last modified 2026-06-16.