CVE-2008-4428

CVE-2008-4428 affects Phlatline’s Personal Information Manager (pPIM) 1.0 and earlier. Unrestricted file upload in upload.php allows remote attackers to upload a .php file and execute it by requesting the file in the top‑level directory, enabling remote code execution (CVSSv2 base score 10.0, HIG...