CVE-2008-4427: Phlatline Personal Information Manager

High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days.

changepassword.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier does not require administrative authentication, which allows remote attackers to change arbitrary passwords.

Affected products

• Phlatline Personal Information Manager: up to and including 1.0

Published 2008-10-03. Last modified 2026-06-16.