PE
Product
Pear
5
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch
Add Pear to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-5630 | 7.5 | Feb 1 | PECL in the download utility class in the Installer in PEAR Base System v1.10.1 does not validate file types and filenames after a redirect, which allows remote HTTP servers to… Affected: 1.10.1 |
| CVE-2011-1072 | – | Mar 3 | The installer in PEAR before 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the (1) download_dir, (2) cache_dir,… Affected: through 1.9.1; 0.2.2; 0.9; 0.10; 0.11; 0.90; +20 more |
| CVE-2011-1144 | – | Mar 3 | The installer in PEAR 1.9.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the (1) download_dir, (2)… Affected: through 1.9.2; 0.2.2; 0.9; 0.10; 0.11; 0.90; +21 more |
| CVE-2006-0144 | – | Jan 9 | The proxy server feature in go-pear.php in PHP PEAR 0.2.2, as used in Apache2Triad, allows remote attackers to execute arbitrary PHP code by redirecting go-pear.php to a malicious… Affected: 0.2.2 |
| CVE-2005-4154 | – | Dec 11 | Unspecified vulnerability in PEAR installer 1.4.2 and earlier allows user-assisted attackers to execute arbitrary code via a crafted package that can execute code when the pear… Affected: through 1.4.2; 0.9; 0.10; 0.11; 0.90; 1.0; +15 more |
Showing 5