Skip to content
OpenAdvisories

Vendor

pear

9 known vulnerabilities.

Products

pearweb 9
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-25241

    PEAR is Vulnerable to SQL Injection in /get/<package>/<version> Endpoint

    PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, an unauthenticated SQL injection in the /get/<package>/<version> endpoint allows remote attackers to execute arbitrary SQL via a crafted package version. This is…

    pear pearweb
  • Critical 9.2
    CVE-2026-25238

    PEAR is Vulnerable to SQL Injection in Bug Subscription Deletion via Weak Email Validation

    PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulnerability in bug subscription deletion may allow attackers to inject SQL via a crafted email value. This issue has been patched in version 1.…

    pear pearweb
  • Critical 9.2
    CVE-2026-25237

    PEAR is Vulnerable to PHP Code Execution via preg_replace /e in Bug Update Emails

    PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, use of preg_replace() with the /e modifier in bug update email handling can enable PHP code execution if attacker-controlled content reaches the evaluated replac…

    pear pearweb