CVE-2008-4425: Phlatline Personal Information Manager

High severity, CVSS 8.8. EPSS: 3% chance of exploitation in the next 30 days.

Directory traversal vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 allows remote attackers to delete arbitrary files via directory traversal sequences in the file parameter within a delfile action.

Affected products

• Phlatline Personal Information Manager: version 1.0 only

Published 2008-10-03. Last modified 2026-06-16.