Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: Phlatline Component: Personal Information Manager Clear all filters
TI-2008-04223 CVE-2008-4428 · GHSA-5cj6-x3m9-h2jr

Unrestricted file upload vulnerability in upload.php in Phlatline's Personal Information…

Priority MEDIUM 53

Unrestricted file upload vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07027 Published 2008-10-03 No fix listed CWE-20
TI-2008-04221 CVE-2008-4426 · GHSA-r82p-wphr-rm49

Cross-site scripting (XSS) vulnerability in events.php in Phlatline's Personal…

Priority LOW 23

Cross-site scripting (XSS) vulnerability in events.php in Phlatline's Personal Information Manager (pPIM) 1.0 allows remote attackers to inject arbitrary web script or HTML via the date parameter in a new action.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.016 Published 2008-10-03 No fix listed CWE-79
TI-2008-04220 CVE-2008-4425 · GHSA-x54f-x9ww-q8wh

Directory traversal vulnerability in upload.php in Phlatline's Personal Information…

Priority MEDIUM 43

Directory traversal vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 allows remote attackers to delete arbitrary files via directory traversal sequences in the file parameter within a de…

CVSS 2.0HIGH 8.8 Network No auth Interaction — EPSS 0.02972 Published 2008-10-03 No fix listed CWE-22