Skip to content
OpenAdvisories

Package · Packagist

pear/http_request2

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2025-43717

    PEAR HTTP_Request2 vulnerable to Cross-site Scripting

    In PEAR HTTP_Request2 before 2.7.0, multiple files in the tests directory, notably tests/_network/getparameters.php and tests/_network/postparameters.php, reflect any GET or POST parameters, leading to XSS.

    avb HTTP_Request2 pear/http_request2 Packagist