← Database

CVE-2008-4427

HIGH CVSS: 7.5 Published: 2008-10-03 Modified: 2026-06-16

Description

changepassword.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier does not require administrative authentication, which allows remote attackers to change arbitrary passwords.

Affected Platforms

Phlatline Personal Information Manager

Weakness Type

CWE-287

References