PEAR

Records24All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

PEAR records in CISA KEV

TI-2020-17477 PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability CRITICAL 93KEV 2022-08-25 TI-2020-18513 PEAR Archive_Tar Improper Link Resolution Vulnerability CRITICAL 90KEV 2022-08-25

Components

Products in the NVD configurations · select one to filter the records

Pearweb 9 records MEDIUM Pear 3 records MEDIUM Structures Datagrid Datasource Mdb2 2 records LOW Crypt Gpg 1 record LOW Html Ajax 1 record MEDIUM Mail 1 record LOW Pear Archive Tar 1 record LOW Pear Archive Zip 1 record LOW

Records

9 records in Pearweb · all components

TI-2026-20389 CVE-2026-25241

PEAR is Vulnerable to SQL Injection in /get/<package>/<version> Endpoint

MEDIUM 48

PEAR is a framework and distribution system for reusable PHP components.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00449 Published 2026-02-03 Fixed in 1.33.0 CWE-89

TI-2026-20385 CVE-2026-25237

PEAR is Vulnerable to PHP Code Execution via preg_replace /e in Bug Update Emails

MEDIUM 48

PEAR is a framework and distribution system for reusable PHP components.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.0046 Published 2026-02-03 Fixed in 1.33.0 CWE-624

TI-2026-20386 CVE-2026-25238

PEAR is Vulnerable to SQL Injection in Bug Subscription Deletion via Weak Email Validation

MEDIUM 41

PEAR is a framework and distribution system for reusable PHP components.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.0031 Published 2026-02-03 Fixed in 1.33.0 CWE-89

TI-2026-20383 CVE-2026-25235

PEAR Has a Predictable Verification Hash in Election Account Requests

MEDIUM 41

PEAR is a framework and distribution system for reusable PHP components.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00291 Published 2026-02-03 Fixed in 1.33.0 CWE-337

TI-2026-20384 CVE-2026-25236

PEAR is Vulnerable to SQL Injection in Damblan_Karma IN() Query via Literal Substitution

LOW 36

PEAR is a framework and distribution system for reusable PHP components.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0031 Published 2026-02-03 Fixed in 1.33.0 CWE-89

TI-2026-20387 CVE-2026-25239

PEAR is Vulnerable to SQL Injection in apidoc_queue Insert via Unescaped Filename

LOW 35

PEAR is a framework and distribution system for reusable PHP components.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00249 Published 2026-02-03 Fixed in 1.33.0 CWE-89

TI-2026-20381 CVE-2026-25233

PEAR Has a Roadmap Authorization Bypass via Operator Precedence Bug

LOW 31

PEAR is a framework and distribution system for reusable PHP components.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00365 Published 2026-02-03 Fixed in 1.33.0 CWE-783

TI-2026-20388 CVE-2026-25240

PEAR is Vulnerable to SQL Injection in user::maintains() Role IN() Filter

LOW 30

PEAR is a framework and distribution system for reusable PHP components.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0031 Published 2026-02-03 Fixed in 1.33.0 CWE-89

TI-2026-20382 CVE-2026-25234

PEAR is Vulnerable to SQL Injection in Category Deletion

LOW 24

PEAR is a framework and distribution system for reusable PHP components.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00293 Published 2026-02-03 Fixed in 1.33.0 CWE-89

Open these records in search →