CVE

Id
34544  
CVE No.
CVE-2008-4427  
Status
Candidate  
Description
changepassword.php in Phlatline"s Personal Information Manager (pPIM) 1.0 and earlier does not require administrative authentication, which allows remote attackers to change arbitrary passwords.  
Phase
Assigned (20081003)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
378435 34544 CVE-2008-4427 MILW0RM:6231  View
378436 34544 CVE-2008-4427 URL:http://www.milw0rm.com/exploits/6231  View
378437 34544 CVE-2008-4427 BID:30627  View
378438 34544 CVE-2008-4427 URL:http://www.securityfocus.com/bid/30627  View
378439 34544 CVE-2008-4427 SECUNIA:31424  View
378440 34544 CVE-2008-4427 URL:http://secunia.com/advisories/31424  View
378441 34544 CVE-2008-4427 SREASON:4349  View
378442 34544 CVE-2008-4427 URL:http://securityreason.com/securityalert/4349  View
378443 34544 CVE-2008-4427 XF:ppim-changepassword-security-bypass(44389)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49613 JVNDB-2008-004923 IceBB の index.php における SQL インジェクションの脆弱性 IceBB の index.php は、includes/functions.php 内の clean_string 関数内に間違った保護メカニズムがあるため、SQL インジェクションの脆弱性が存在します。 CVE-2008-4431 34544 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004923.html  View