Read the docs

PEAR

Records24All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

PEAR records in CISA KEV
TI-2020-17477 PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability Priority CRITICAL 93KEV 2022-08-25TI-2020-18513 PEAR Archive_Tar Improper Link Resolution Vulnerability Priority CRITICAL 90KEV 2022-08-25

Components

Products in the NVD configurations · select one to filter the records
Pearweb 9 records MEDIUM Pear 3 records MEDIUM Structures Datagrid Datasource Mdb2 2 records LOW Crypt Gpg 1 record LOW Html Ajax 1 record MEDIUM Mail 1 record LOW Pear Archive Tar 1 record LOW Pear Archive Zip 1 record LOW

Records

1 record in Mail · all components

TI-2009-03900 CVE-2009-4111 · GHSA-w5wx-rhpx-rwf6

Argument injection vulnerability in Mail/sendmail.php in the Mail package 1.1.14…

Priority LOW 33

Argument injection vulnerability in Mail/sendmail.php in the Mail package 1.1.14, 1.2.0b2, and possibly other versions for PEAR allows remote attackers to read and write arbitrary files via a crafted $recipients paramete…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01637 Published 2009-11-28 No fix listed CWE-94
Open these records in search →