Advisories · Technology
pearweb.
Every CVE that names pearweb among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.3 CriticalCritical · CVSS 9+
PEAR is Vulnerable to SQL Injection in /get/<package>/<version> Endpoint
- pearweb
- SQL injection
- CVSS 6.9 Medium
PEAR is Vulnerable to SQL Injection in user::maintains() Role IN() Filter
- pearweb
- SQL injection
- CVSS 8.2 High
PEAR is Vulnerable to SQL Injection in apidoc_queue Insert via Unescaped Filename
- pearweb
- SQL injection
- CVSS 9.2 CriticalCritical · CVSS 9+
PEAR is Vulnerable to SQL Injection in Bug Subscription Deletion via Weak Email Validation
- pearweb
- SQL injection
- CVSS 9.2 CriticalCritical · CVSS 9+
PEAR is Vulnerable to PHP Code Execution via preg_replace /e in Bug Update Emails
- pearweb
- CWE-624
- CVSS 6.9 Medium
PEAR is Vulnerable to SQL Injection in Damblan_Karma IN() Query via Literal Substitution
- pearweb
- SQL injection
- CVSS 8.2 High
PEAR Has a Predictable Verification Hash in Election Account Requests
- pearweb
- CWE-337
- CVSS 5.3 Medium
PEAR is Vulnerable to SQL Injection in Category Deletion
- pearweb
- SQL injection
- CVSS 7.1 High
PEAR Has a Roadmap Authorization Bypass via Operator Precedence Bug
- pearweb
- CWE-783