CVE-2008-4528

CVE-2008-4528 affects Phlatline’s Personal Information Manager (pPIM) 1.01. The issue is a directory traversal in notes.php where an attacker can cause inclusion and execution of arbitrary local files by supplying a ".." in the id parameter during an edit action. This relies on improper handling ...

CVE-2008-4528: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in notes.php in Phlatline's Personal Information Manager pPIM 1.01 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the id parameter in an edit action...

ppim-lfi.txt

pPIM 1.01 notes.php id Local File Inclusion Vulnerability url: http://www.phlatline.org/docs/files/ppim.zip Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk. Author wil...

pPIM 1.01 (notes.php id) Local File Inclusion Vulnerability

No description provided by source. pPIM 1.01 notes.php id Local File Inclusion Vulnerability url: http://www.phlatline.org/docs/files/ppim.zip Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose...

pPIM 1.01 (notes.php id) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications =========================================================== pPIM 1.01 notes.php id Local File Inclusion Vulnerability =========================================================== pPIM 1.01 notes.php id Local File Inclusion Vulnerability url...

pPIM 1.01 - 'notes.php' Local File Inclusion

pPIM 1.01 notes.php id Local File Inclusion Vulnerability url: http://www.phlatline.org/docs/files/ppim.zip Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk. Author wil...

pPIM 1.01 - notes.php Local File Inclusion

pPIM 1.01 - notes.php Local File Inclusion pPIM 1.01 notes.php id Local File Inclusion Vulnerability url: http://www.phlatline.org/docs/files/ppim.zip Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational...

Cross site scripting

Cross-site scripting XSS vulnerability in events.php in Phlatline's Personal Information Manager pPIM 1.0 allows remote attackers to inject arbitrary web script or HTML via the date parameter in a new action...

CVE-2008-4425

CVE-2008-4425 concerns Phlatline’s Personal Information Manager (pPIM) 1.0. The vulnerability is a directory traversal issue in upload.php (action delfile) that allows a remote attacker to delete arbitrary files by manipulating the file parameter. Documented impact includes the ability to delete ...

CVE-2008-4427

CVE-2008-4427 affects Phlatline’s Personal Information Manager (pPIM) up to version 1.0. The vulnerability is that changepassword.php does not require administrative authentication, enabling remote attackers to change arbitrary user passwords. This is the explicitly described impact in the CVE en...

CVE-2008-4428

CVE-2008-4428 affects Phlatline’s Personal Information Manager (pPIM) 1.0 and earlier. Unrestricted file upload in upload.php allows remote attackers to upload a .php file and execute it by requesting the file in the top‑level directory, enabling remote code execution (CVSSv2 base score 10.0, HIG...

CVE-2008-4426

Phlatline's Personal Information Manager (pPIM) 1.0 contains a Cross-site Scripting (XSS) vulnerability in events.php. The flaw allows remote attackers to inject arbitrary web script or HTML via the date parameter in a new action. This is documented under CVE-2008-4426; multiple connected sources...

CVE-2008-4425

Directory traversal vulnerability in upload.php in Phlatline's Personal Information Manager pPIM 1.0 allows remote attackers to delete arbitrary files via directory traversal sequences in the file parameter within a delfile action...

CVE-2008-4425: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in upload.php in Phlatline's Personal Information Manager pPIM 1.0 allows remote attackers to delete arbitrary files via directory traversal sequences in the file parameter within a delfile action...

CVE-2008-4427: Improper Authentication

changepassword.php in Phlatline's Personal Information Manager pPIM 1.0 and earlier does not require administrative authentication, which allows remote attackers to change arbitrary passwords...

CVE-2008-4428: Improper Input Validation

Unrestricted file upload vulnerability in upload.php in Phlatline's Personal Information Manager pPIM 1.0 and earlier allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a direct request to the file in the top-level directory...

ppim-deletexss.txt

Author : BeyazKurt Contact : [email protected] Script : Ppim v1.0 Bu ne bicim script adidir amk :D Download : http://scripts.ringsworld.com/organizers/ppim.zip D0rk : inurl:events.php?listallevents File Delete Vulnerability: upload.php...

ppimp-upload.txt

Ppim = 1.0 upload/change password Multiple Vulnerabilities cript : Ppim v1.0 Download : http://scripts.ringsworld.com/organizers/ppim.zip By Stack Poc 1: change password for change password go to this link http://localhost/ppim/changepassword.php writhe your password and confirm it Poc 2 : upload...

Ppim <= 1.0 (upload/change password) Multiple Vulnerabilities

Exploit for unknown platform in category web applications ============================================================= Ppim = 1.0 upload/change password Multiple Vulnerabilities ============================================================= Ppim = 1.0 upload/change password Multiple Vulnerabiliti...

Ppim &lt;= 1.0 (Arbitrary File Delete/XSS) Multiple Vulnerabilities

No description provided by source. Author : BeyazKurt Contact : [email protected] Script : Ppim v1.0 Bu ne bicim script adidir amk :D Download : http://scripts.ringsworld.com/organizers/ppim.zip D0rk : inurl:events.php?listallevents File Delete Vulnerability: upload.php...