CVE-2022-27158

pearweb 1.32 suffers from Deserialization of Untrusted Data...

CVE-2022-27158

pearweb 1.32 suffers from Deserialization of Untrusted Data...

CVE-2022-27158

pearweb 1.32 suffers from Deserialization of Untrusted Data...

CVE-2022-27158

The CVE-2022-27158 entry affects pearweb prior to 1.32, with the root cause being Deserialization of Untrusted Data. According to sources, this vulnerability impacts confidentiality, integrity, and availability (high impact) and is exploitable over the network with low complexity and no authentic...

CVE-2022-27157

Pearweb

CVE-2022-27157

pearweb 1.32 is suffers from a Weak Password Recovery Mechanism via include/users/passwordmanage.php...

CVE-2022-27157

pearweb 1.32 is suffers from a Weak Password Recovery Mechanism via include/users/passwordmanage.php...

CVE-2022-27157

pearweb 1.32 is suffers from a Weak Password Recovery Mechanism via include/users/passwordmanage.php...

Pearweb authorization issue vulnerability

pearweb is a PHP extension and application repository. pearweb has a security vulnerability that stems from a weak password recovery mechanism in include/users/passwordmanage.php, and no details of the vulnerability are currently available...

PT-2022-18256

Name of the Vulnerable Software and Affected Versions pearweb versions prior to 1.32 Description The issue is related to the deserialization of untrusted data. Recommendations For versions prior to 1.32, update to version 1.32 or later to resolve the issue...

CVE-2022-27157: Weak Password Recovery Mechanism for Forgotten Password

pearweb 1.32 is suffers from a Weak Password Recovery Mechanism via include/users/passwordmanage.php...

PT-2022-18255

Name of the Vulnerable Software and Affected Versions pearweb versions prior to 1.32 Description The issue is related to a weak password recovery mechanism. It is specifically exploitable via the include/users/passwordmanage.php endpoint. Recommendations For versions prior to 1.32, update to...

pearweb

pearweb is a PHP extension and application repository. A security vulnerability exists in pearweb before 1.32, which stems from deserialization of untrusted data...

CVE-2022-27158: Deserialization of Untrusted Data

pearweb 1.32 suffers from Deserialization of Untrusted Data...

PEAR MT Random Time Code Execution

The vulnerability in the implementation of the mtrand and time functions in the pearweb package’s PHP class library in the PEAR library is related to the use of an insufficiently secure MD5 encryption algorithm. Exploiting this vulnerability could allow an attacker to gain unauthorized access to...

PT-2021-6559

Name of the Vulnerable Software and Affected Versions PEAR PHP classes library affected versions not specified Description The issue is related to the implementation of the mt rand and time functions in the pearweb package of the PEAR PHP classes library. It involves the use of the MD5 encryption...