| Reporter | Title | Published | Views | Family All 20 |
|---|---|---|---|---|
 | CVE-2007-2519 | 22 May 200719:00 | – | cvelist |
 | PHP PEAR 1.5.3 - INSTALL-AS Attribute Arbitrary File Overwrite | 7 May 200700:00 | – | exploitdb |
 | EUVD-2007-2512 | 7 Oct 202500:30 | – | euvd |
 | Mandrake Linux Security Advisory : php-pear (MDKSA-2007:110) | 5 Jun 200700:00 | – | nessus |
| Mandriva Linux Security Advisory : php-pear (MDVSA-2011:187) | 16 Dec 201100:00 | – | nessus |
| MiracleLinux 4 : php-pear-1.9.4-4.AXS4 (AXSA:2012-73:01) | 14 Jan 202600:00 | – | nessus |
| Ubuntu 6.06 LTS / 6.10 / 7.04 : php5 vulnerabilities (USN-462-1) | 10 Nov 200700:00 | – | nessus |
 | CVE-2007-2519 | 22 May 200719:30 | – | nvd |
 | Mandriva Update for php-pear MDKSA-2007:110 (php-pear) | 9 Apr 200900:00 | – | openvas |
| Mandriva Update for php-pear MDVSA-2011:187 (php-pear) | 16 Dec 201100:00 | – | openvas |
10
Node
OR
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| install-as attribute in the file element in package.xml 1.0 | nested | ../../test.php | Directory traversal via install-as/as attributes in package.xml allows overwriting arbitrary files. | CWE-22 |
| as attribute in the install element in package.xml 2.0 | nested | ../../test.php | Directory traversal via install-as/as attributes in package.xml allows overwriting arbitrary files. | CWE-22 |
| install-as attribute in the file element in package.xml 1.0 | nested | /usr/local/test.php | Directory traversal leading to installation of files at arbitrary locations via a crafted package.xml. | CWE-22 |
| as attribute in the install element in package.xml 2.0 | nested | /usr/local/test.php | Directory traversal leading to installation of files at arbitrary locations via a crafted package.xml. | CWE-22 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
16 Jun 2026 22:39Current
6.5Medium risk
Vulners AI Score6.5
CVSS 26.8
EPSS0.07288