Skip to content
OpenAdvisories

Vendor

pear

9 known vulnerabilities.

Products

pearweb 9
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.2
    CVE-2026-25239

    PEAR is Vulnerable to SQL Injection in apidoc_queue Insert via Unescaped Filename

    PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulnerability in apidoc queue insertion can allow query manipulation if an attacker can influence the inserted filename value. This issue has bee…

    pear pearweb
  • High 8.2
    CVE-2026-25235

    PEAR Has a Predictable Verification Hash in Election Account Requests

    PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, predictable verification hashes may allow attackers to guess verification tokens and potentially verify election account requests without authorization. This iss…

    pear pearweb
  • High 7.1
    CVE-2026-25233

    PEAR Has a Roadmap Authorization Bypass via Operator Precedence Bug

    PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, logic bug in the roadmap role check allows non-lead maintainers to create, update, or delete roadmaps. This issue has been patched in version 1.33.0.

    pear pearweb