videos.php in PHPDirector 0.21 and previous versions allows remote malicious users to obtain sensitive information via an empty value of the id[] parameter, which reveals the path in an error message.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
phpdirector phpdirector |