Personal Information Manager

personal_information_manager

Vendor: Phlatline • 5 CVEs

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-4528 1Phlatline 1Personal Information Manager Apr 23, 2026 Oct 9, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 Directory traversal vulnerability in notes.php in Phlatline's Personal Information Manager (pPIM) 1.01 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the id parameter in an edi...Show more Directory traversal vulnerability in notes.php in Phlatline's Personal Information Manager (pPIM) 1.01 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the id parameter in an edit action.Show less
CVE-2008-4428 1Phlatline 1Personal Information Manager Apr 23, 2026 Oct 3, 2008 N/A· v4 N/A· v3 10.0 HIGH· v2 Unrestricted file upload vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a...Show more Unrestricted file upload vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a direct request to the file in the top-level directory.Show less
CVE-2008-4427 1Phlatline 1Personal Information Manager Apr 23, 2026 Oct 3, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 changepassword.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier does not require administrative authentication, which allows remote attackers to change arbitrary passwords.
CVE-2008-4426 1Phlatline 1Personal Information Manager Apr 23, 2026 Oct 3, 2008 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in events.php in Phlatline's Personal Information Manager (pPIM) 1.0 allows remote attackers to inject arbitrary web script or HTML via the date parameter in a new action.
CVE-2008-4425 1Phlatline 1Personal Information Manager Apr 23, 2026 Oct 3, 2008 N/A· v4 N/A· v3 8.8 HIGH· v2 Directory traversal vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 allows remote attackers to delete arbitrary files via directory traversal sequences in the file parameter within a de...Show more Directory traversal vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 allows remote attackers to delete arbitrary files via directory traversal sequences in the file parameter within a delfile action.Show less