Read the docs

Phlatline

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Phlatline records in CISA KEV

No Phlatline vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Personal Information Manager 5 records MEDIUM

Records

5 records

TI-2008-04223 CVE-2008-4428 · GHSA-5cj6-x3m9-h2jr

Unrestricted file upload vulnerability in upload.php in Phlatline's Personal Information…

Priority MEDIUM 53

Unrestricted file upload vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07027 Published 2008-10-03 No fix listed CWE-20
TI-2008-04220 CVE-2008-4425 · GHSA-x54f-x9ww-q8wh

Directory traversal vulnerability in upload.php in Phlatline's Personal Information…

Priority MEDIUM 43

Directory traversal vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 allows remote attackers to delete arbitrary files via directory traversal sequences in the file parameter within a de…

CVSS 2.0HIGH 8.8 Network No auth Interaction — EPSS 0.02972 Published 2008-10-03 No fix listed CWE-22
TI-2008-04221 CVE-2008-4426 · GHSA-r82p-wphr-rm49

Cross-site scripting (XSS) vulnerability in events.php in Phlatline's Personal…

Priority LOW 23

Cross-site scripting (XSS) vulnerability in events.php in Phlatline's Personal Information Manager (pPIM) 1.0 allows remote attackers to inject arbitrary web script or HTML via the date parameter in a new action.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.016 Published 2008-10-03 No fix listed CWE-79
Open these records in search →