CVE:CVE-2007-3529
CNNVD:CNNVD-200707-022
PHPDirector 0.21及之前版本中的videos.php使远程攻击者可以借助id[]参数的一个空值获得敏感信息。这会在错误信息中显示路径。
solution:Upgrade phpdirector phpdirector to a higher version than 0.21,and avoid the version (,0.21]