7.5
CVSSv2

CVE-2008-4528

Published: 09/10/2008 Updated: 29/09/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 770
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Directory traversal vulnerability in notes.php in Phlatline's Personal Information Manager (pPIM) 1.01 allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the id parameter in an edit action.

Vulnerable Product Search on Vulmon Subscribe to Product

phlatline personal information manager 1.01

Exploits

- -= pPIM Multiple Vulnerabilities =- Version Tested: pPIM 10 Vendor notified Full details can also be found at wwwlampsecurityorg/node/18 Author: Justin C Klein Keane <justin@madirishnet> Description pPIM (wwwphlatlineorg/indexphp?page=prod-ppim) is a Personal Information Management application written in PHP that c ...
########################################################## #Author : BeyazKurt #Contact : Djm-sut@HotmailCom # #Script : Ppim v10 [Bu ne bicim script adidir amk :D ] #Download : scriptsringsworldcom/organizers/ppimzip # # D0rk : inurl:eventsphp?listallevents # # File Delete Vulnerability: uploadphp # # Example:creawebscommx/ ...
Ppim <= 10 (upload/change password) Multiple Vulnerabilities cript : Ppim v10 Download : scriptsringsworldcom/organizers/ppimzip By Stack Poc 1: change password for change password go to this link localhost/ppim/changepasswordphp writhe your password and confirm it Poc 2 : upload localhost/ppim/uploadphp you can uplo ...
# pPIM 101 (notesphp id) Local File Inclusion Vulnerability # url: wwwphlatlineorg/docs/files/ppimzip # # Author: JosS # mail: sys-project[at]hotmail[dot]com # site: spanish-hackerscom # team: Spanish Hackers Team - [SHT] # # This was written for educational purpose Use it at your own risk # Author will be not responsible for ...