CVE-2008-4428 Unrestricted file upload vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier allows remote attackers to execute arbitrary code by uploading a .php file, then...
HighCVSS 10.0
EPSS 7.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Unrestricted file upload vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a direct request to the file in the top-level directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phlatline personal information manager | <= 1.0 | No fix listed |
References
- 31424 third-party-advisory
- 4349 third-party-advisory
- 30627 vdb-entry
- ppim-upload-file-upload(44390) vdb-entry
- 6231 exploit