CVE:CVE-2008-4428
CNNVD:CNNVD-200810-045
Phlatline's Personal Information Manager (pPIM)的upload.php中存在无限制文件上传漏洞。远程攻击者可以通过上传一个.php文件然后对顶层目录的文件发送一个直接请求来访问该文件以执行任意代码。
solution:Upgrade phlatline personal_information_manager to a higher version than 1.0,and avoid the version (,1.0]