Skip to content
OpenAdvisories

Vendor

pear

9 known vulnerabilities.

Products

pearweb 9
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.9
    CVE-2026-25240

    PEAR is Vulnerable to SQL Injection in user::maintains() Role IN() Filter

    PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulnerability can occur in user::maintains() when role filters are provided as an array and interpolated into an IN (...) clause. This issue has …

    pear pearweb
  • Medium 6.9
    CVE-2026-25236

    PEAR is Vulnerable to SQL Injection in Damblan_Karma IN() Query via Literal Substitution

    PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN (...) list. This issue has been patched in version 1.33.0.

    pear pearweb
  • Medium 5.3
    CVE-2026-25234

    PEAR is Vulnerable to SQL Injection in Category Deletion

    PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulnerability in category deletion can allow an attacker with access to the category manager workflow to inject SQL via a category id. This issue…

    pear pearweb