PEAR

Records24All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

PEAR records in CISA KEV

TI-2020-17477 PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability CRITICAL 93KEV 2022-08-25 TI-2020-18513 PEAR Archive_Tar Improper Link Resolution Vulnerability CRITICAL 90KEV 2022-08-25

Components

Products in the NVD configurations · select one to filter the records

Pearweb 9 records MEDIUM Pear 3 records MEDIUM Structures Datagrid Datasource Mdb2 2 records LOW Crypt Gpg 1 record LOW Html Ajax 1 record MEDIUM Mail 1 record LOW Pear Archive Tar 1 record LOW Pear Archive Zip 1 record LOW

Records

3 records in Pear · all components

TI-2009-03817 CVE-2009-4025 · GHSA-54vq-c3mg-r28r

Argument injection vulnerability in the traceroute function in Traceroute.php in the…

MEDIUM 52

Argument injection vulnerability in the traceroute function in Traceroute.php in the Net_Traceroute package before 0.21.2 for PEAR allows remote attackers to execute arbitrary shell commands via the host parameter.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06149 Published 2009-11-28 No fix listed CWE-78

TI-2009-03816 CVE-2009-4024 · GHSA-mvh4-xpvg-hf66

Argument injection vulnerability in the ping function in Ping.php in the Net_Ping package…

MEDIUM 52

Argument injection vulnerability in the ping function in Ping.php in the Net_Ping package before 2.4.5 for PEAR allows remote attackers to execute arbitrary shell commands via the host parameter.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06133 Published 2009-11-28 No fix listed CWE-94

TI-2009-03815 CVE-2009-4023 · GHSA-x58g-52cf-5mj7

Argument injection vulnerability in the sendmail implementation of the Mail::Send method…

LOW 37

Argument injection vulnerability in the sendmail implementation of the Mail::Send method (Mail/sendmail.php) in the Mail package 1.1.14 for PEAR allows remote attackers to read and write arbitrary files via a crafted $fr…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02402 Published 2009-11-28 No fix listed CWE-94

Open these records in search →

Critical	7
High	7
Medium	10
Low	0
No CVSS	0