Phlatline Personal Information Manager — known CVE vulnerabilities

Every CVE whose affected-product data names Phlatline Personal Information Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2008-4428 — CVSS 10.0 (critical): Unrestricted file upload vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier allows remote…
• CVE-2008-4425 — CVSS 8.8 (high): Directory traversal vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 allows remote attackers to delete…
• CVE-2008-4427 — CVSS 7.5 (high): changepassword.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier does not require administrative authentication, which…
• CVE-2008-4528 — CVSS 7.5 (high): Directory traversal vulnerability in notes.php in Phlatline's Personal Information Manager (pPIM) 1.01 allows remote attackers to include…
• CVE-2008-4426 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in events.php in Phlatline's Personal Information Manager (pPIM) 1.0 allows remote attackers to…