CVE-2008-4528

EPSS 2.6%

Directory traversal vulnerability in notes.php in Phlatline's Personal Information Manager (pPIM) 1.01 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the id parameter in an edit action.

Affected products

n/a · n/a

public PoCs found — 4

exploitdbwww.exploit-db.com/exploits/6215unverified exploitdbwww.exploit-db.com/exploits/8105unverified exploitdbwww.exploit-db.com/exploits/6231unverified cve_referencewww.exploit-db.com/exploits/6667unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://securityreason.com/securityalert/4390 https://exchange.xforce.ibmcloud.com/vulnerabilities/45681 https://www.exploit-db.com/exploits/6667 http://www.securityfocus.com/bid/31571