Pearadmin

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Pearadmin records in CISA KEV

No Pearadmin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pear Admin Boot 3 records MEDIUM Pear Admin Think 2 records HIGH Pearadmin Think 1 record MEDIUM

Records

6 records

TI-2021-10119 CVE-2021-29378 · GHSA-x42f-8wgr-whhg

SQL Injection in pear-admin-think version 2.1.2, allows attackers to execute arbitrary…

HIGH 73

SQL Injection in pear-admin-think version 2.1.2, allows attackers to execute arbitrary code and escalate privileges via crafted GET request to Crud.php.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00798 Published 2023-08-11 No fix listed CWE-89

TI-2024-05813 CVE-2024-6266 · GHSA-pg6p-3hcc-49g7

Pear Admin Boot loadDictItem sql injection

MEDIUM 57

A vulnerability classified as critical has been found in Pear Admin Boot up to 2.0.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00515 Published 2024-06-23 No fix listed CWE-89

TI-2024-05788 CVE-2024-6241 · GHSA-2jrf-mm4v-jgmc

Pear Admin Boot getDictItems sql injection

MEDIUM 57

A vulnerability was found in Pear Admin Boot up to 2.0.2 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00523 Published 2024-06-21 No fix listed CWE-89

TI-2021-10118 CVE-2021-29377 · GHSA-7jv3-m85g-h6v2

Pear Admin Think through 2.1.2 has an arbitrary file upload vulnerability that allows…

MEDIUM 45

Pear Admin Think through 2.1.2 has an arbitrary file upload vulnerability that allows attackers to execute arbitrary code remotely.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01603 Published 2021-08-12 No fix listed CWE-434

TI-2023-14269 CVE-2023-30417 · GHSA-m42j-4xh8-862v

A cross-site scripting (XSS) vulnerability in Pear-Admin-Boot up to v2.0.2 allows…

LOW 25

A cross-site scripting (XSS) vulnerability in Pear-Admin-Boot up to v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title of a private message.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.004 Published 2023-04-25 No fix listed CWE-79

TI-2022-07885 CVE-2022-23903 · GHSA-6gj7-p95m-cwrq

A Cross Site Scripting (XSS) vulnerability exists in pearadmin pear-admin-think <=5.0.6…

LOW 25

A Cross Site Scripting (XSS) vulnerability exists in pearadmin pear-admin-think <=5.0.6, which allows a login account to access arbitrary functions and cause stored XSS through a fake User-Agent.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00562 Published 2022-03-29 No fix listed CWE-79

Open these records in search →

Critical	1
High	1
Medium	4
Low	0
No CVSS	0