GCVE - cpe:2.3:a:phlatline:personal_information

Approved changes feed: RSS · Atom

cpe:2.3:a:phlatline:personal_information_manager:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

Vendor	Phlatline (`12d5716d-2074-5e60-a823-c2b1b92494e6`)
Product	Personal Information Manager (`34d283c9-b33d-5f42-b8dd-9540698fa01a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-4426`	vulnerable	2026-06-08 04:50:38.884706	Details available Cross-site scripting (XSS) vulnerability in events.php in Phlatline's Personal Information Manager (pPIM) 1.0 allows remote attackers to inject arbitrary web script or HTML via the date parameter in a new action. Published: 2008-10-03T22:00:00.000Z Updated: 2024-08-07T10:17:09.697Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/4348 https://exchange.xforce.ibmcloud.com/vulnerabilities/44388 http://secunia.com/advisories/31424 http://www.securityfocus.com/bid/30627 https://www.exploit-db.com/exploits/6215	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4425`	vulnerable	2026-06-08 04:50:38.884303	Details available Directory traversal vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 allows remote attackers to delete arbitrary files via directory traversal sequences in the file parameter within a delfile action. Published: 2008-10-03T22:00:00.000Z Updated: 2024-08-07T10:17:09.237Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/4348 http://secunia.com/advisories/31424 http://www.securityfocus.com/bid/30627 https://exchange.xforce.ibmcloud.com/vulnerabilities/44386 https://www.exploit-db.com/exploits/6215	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.