Pear vulnerabilities

Products

• Pearweb 9
• Pear 3
• Archive Tar 2
• Structures Datagrid Datasource Mdb2 2

Newest

• pear pearweb PEAR is Vulnerable to SQL Injection in /get/<package>/<version> Endpoint CVE-2026-25241 9.3 CriticalFebruary 3, 2026
• pear pearweb PEAR is Vulnerable to SQL Injection in user::maintains() Role IN() Filter CVE-2026-25240 6.9 MediumFebruary 3, 2026
• pear pearweb PEAR is Vulnerable to SQL Injection in apidoc_queue Insert via Unescaped Filename CVE-2026-25239 8.2 HighFebruary 3, 2026
• pear pearweb PEAR is Vulnerable to SQL Injection in Bug Subscription Deletion via Weak Email Validation CVE-2026-25238 9.2 CriticalFebruary 3, 2026
• pear pearweb PEAR is Vulnerable to PHP Code Execution via preg_replace /e in Bug Update Emails CVE-2026-25237 9.2 CriticalFebruary 3, 2026
• pear pearweb PEAR is Vulnerable to SQL Injection in Damblan_Karma IN() Query via Literal Substitution CVE-2026-25236 6.9 MediumFebruary 3, 2026
• pear pearweb PEAR Has a Predictable Verification Hash in Election Account Requests CVE-2026-25235 8.2 HighFebruary 3, 2026
• pear pearweb PEAR is Vulnerable to SQL Injection in Category Deletion CVE-2026-25234 5.3 MediumFebruary 3, 2026
• pear pearweb PEAR Has a Roadmap Authorization Bypass via Operator Precedence Bug CVE-2026-25233 7.1 HighFebruary 3, 2026
• pear crypt gpg Crypt_GPG does not prevent additional options in GPG calls CVE-2022-24953 Fix available 5.3 MediumFebruary 17, 2022
• debian linux, drupal, fedoraproject fedora +1 more +3 more Directory Traversal in Archive_Tar CVE-2020-36193 In KEVFix available EPSS 70.6% 7.5 HighJanuary 18, 2021
• debian linux, drupal, fedoraproject fedora +1 more +3 more Multiple vulnerabilities through filename manipulation in Archive_Tar CVE-2020-28949 In KEVPublic exploitFix available EPSS 84.6% 7.8 HighNovember 19, 2020
• pear html ajax PEAR HTML_AJAX 0.3.0 through 0.5.7 has a PHP Object Injection Vulnerability in the PHP Serializer... CVE-2017-5677 9.8 CriticalFebruary 6, 2017
• pear Argument injection vulnerability in the traceroute function in Traceroute.php in the... CVE-2009-4025 10.0 HighNovember 28, 2009
• pear Argument injection vulnerability in the ping function in Ping.php in the Net_Ping package before... CVE-2009-4024 Fix available 10.0 HighNovember 28, 2009
• pear mail Argument injection vulnerability in Mail/sendmail.php in the Mail package 1.1.14, 1.2.0b2, and... CVE-2009-4111 Fix available 6.8 MediumNovember 23, 2009
• pear Argument injection vulnerability in the sendmail implementation of the Mail::Send method (Mail... CVE-2009-4023 Fix available 7.5 HighNovember 23, 2009
• pear structures datagrid datasource mdb2 The LOB functionality in PEAR MDB2 before 2.5.0a1 interprets a request to store a URL string as a... CVE-2007-5934 Fix available 4.3 MediumNovember 13, 2007
• pear structures datagrid datasource mdb2 Unspecified vulnerability in the fetch function in MDB2.php in PEAR Structures-DataGrid... CVE-2007-3628 5.0 MediumJuly 9, 2007
• pear archive zip Directory traversal vulnerability in zip.lib.php 0.1.1 in PEAR::Archive_Zip allows remote... CVE-2006-0932 5.0 MediumFebruary 28, 2006
• pear archive tar PEAR::Archive_Tar Directory Traversal vulnerability CVE-2006-0931 Fix available 5.0 MediumFebruary 28, 2006
• pear liveuser Directory traversal vulnerability in the "remember me" feature in liveuser.php in PHP Extension... CVE-2006-0869 Public exploit 6.4 MediumFebruary 23, 2006
• pear xml rpc PEAR::Auth potential authentication bypass vulnerability CVE-2006-0868 Fix available 7.5 HighFebruary 23, 2006
• pear text password Unspecified vulnerability in PEAR Text_Password 1.0 has unknown impact and attack vectors,... CVE-2005-4730 10.0 HighDecember 31, 2005