CVE

Id
34545  
CVE No.
CVE-2008-4428  
Status
Candidate  
Description
Unrestricted file upload vulnerability in upload.php in Phlatline"s Personal Information Manager (pPIM) 1.0 and earlier allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a direct request to the file in the top-level directory.  
Phase
Assigned (20081003)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
378444 34545 CVE-2008-4428 MILW0RM:6231  View
378445 34545 CVE-2008-4428 URL:http://www.milw0rm.com/exploits/6231  View
378446 34545 CVE-2008-4428 BID:30627  View
378447 34545 CVE-2008-4428 URL:http://www.securityfocus.com/bid/30627  View
378448 34545 CVE-2008-4428 SECUNIA:31424  View
378449 34545 CVE-2008-4428 URL:http://secunia.com/advisories/31424  View
378450 34545 CVE-2008-4428 SREASON:4349  View
378451 34545 CVE-2008-4428 URL:http://securityreason.com/securityalert/4349  View
378452 34545 CVE-2008-4428 XF:ppim-upload-file-upload(44390)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50963 JVNDB-2008-006273 Xoops 用の RMSOFT MiniShop モジュールにおけるクロスサイトスクリプティングの脆弱性 Xoops 用の RMSOFT MiniShop モジュールの search.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-4432 34545 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006273.html  View