Security Advisory
CVE-2007-3529
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
videos.php in PHPDirector 0.21 and earlier allows remote attackers to obtain sensitive information via an empty value of the id[] parameter, which reveals the path in an error message.