VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 3, 2008· Updated Jun 16, 2026

CVE-2008-4427

CVE-2008-4427

Description

changepassword.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier does not require administrative authentication, which allows remote attackers to change arbitrary passwords.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Phlatline/Personal Information Manager2 versions
    cpe:2.3:a:phlatline:personal_information_manager:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:phlatline:personal_information_manager:*:*:*:*:*:*:*:*range: <=1.0
    • (no CPE)range: <=1.0
  • Phlatline/pPIMllm-fuzzy
    Range: <=1.0

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.