VendorsPhlatlinepersonal_information_managerany version
Vulnerabilities

Phlatline Personal Information Manager any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2008-4428
Unrestricted file upload vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a direct request to the file in the top-level directory.
Published 2008-10-03 · Modified
10.03 PoCEPSS 0.070
CVE-2008-4427
changepassword.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier does not require administrative authentication, which allows remote attackers to change arbitrary passwords.
Published 2008-10-03 · Modified
7.53 PoCEPSS 0.030