Known vulnerabilities in PEAR

Vendor: PHP Group
Software: PEAR
Software CPE: cpe:2.3:a:php_group:pear:*:*:*:*:*:*:*:*
Total vulnerabilities: 4
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PEAR PEAR is affected by 4 known vulnerabilities: 1 critical, 3 medium Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU17096 - Hidden Functionality (Backdoor)
CWE-912 Critical
No
No
1.10.9 21.01.2019 SB2019012102
#VU39753 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2017-5630
CWE-74 Medium
Available
No
- 02.02.2017 SB2017020210
#VU45253 - Improper Link Resolution Before File Access ('Link Following')
CVE-2011-1072
CWE-59 Medium
No
No
- 03.03.2011 SB2011030304
#VU45260 - Improper Link Resolution Before File Access ('Link Following')
CVE-2011-1144
CWE-59 Medium
No
No
- 03.03.2011 SB2011030306