| Package | Affected versions | Patched versions |
|---|---|---|
| personal information manager | ≤ 1.0 |
changepassword.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier does not require administrative authentication, which allows remote attackers to change arbitrary passwords.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free