Lucene search
K

11 matches found

RedhatCVE
RedhatCVE
added 2026/02/04 7:27 p.m.3 views

CVE-2026-25238

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulnerability in bug subscription deletion may allow attackers to inject SQL via a crafted email value. This issue has been patched in version 1.33.0...

9.8CVSS5.6AI score0.00056EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/02/04 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2026-25238

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulnerability in bug subscription deletion may...

9.8CVSS5.7AI score0.00056EPSS
Exploits0References2
NVD
NVD
added 2026/02/03 7:16 p.m.2 views

CVE-2026-25238

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulnerability in bug subscription deletion may allow attackers to inject SQL via a crafted email value. This issue has been patched in version 1.33.0...

9.8CVSS0.00056EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2026/02/03 7:16 p.m.2 views

CVE-2026-25238

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulnerability in bug subscription deletion may allow attackers to inject SQL via a crafted email value. This issue has been patched in version 1.33.0...

9.8CVSS5.6AI score0.00056EPSS
Exploits0References2
EUVD
EUVD
added 2026/02/03 6:30 p.m.2 views

EUVD-2026-5197

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulnerability in bug subscription deletion may allow attackers to inject SQL via a crafted email value. This issue has been patched in version 1.33.0...

9.2CVSS5.6AI score0.00056EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/02/03 6:30 p.m.2 views

CVE-2026-25238 PEAR is Vulnerable to SQL Injection in Bug Subscription Deletion via Weak Email Validation

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulnerability in bug subscription deletion may allow attackers to inject SQL via a crafted email value. This issue has been patched in version 1.33.0...

9.2CVSS5.6AI score0.00056EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/03 6:30 p.m.2 views

CVE-2026-25238

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulnerability in bug subscription deletion may allow attackers to inject SQL via a crafted email value. This issue has been patched in version 1.33.0...

9.2CVSS5.6AI score0.00056EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2026/02/03 6:30 p.m.23 views

CVE-2026-25238 PEAR is Vulnerable to SQL Injection in Bug Subscription Deletion via Weak Email Validation

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulnerability in bug subscription deletion may allow attackers to inject SQL via a crafted email value. This issue has been patched in version 1.33.0...

9.2CVSS0.00056EPSS
Exploits0References1
OSV
OSV
added 2026/02/03 6:30 p.m.5 views

CVE-2026-25238 PEAR is Vulnerable to SQL Injection in Bug Subscription Deletion via Weak Email Validation

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulnerability in bug subscription deletion may allow attackers to inject SQL via a crafted email value. This issue has been patched in version 1.33.0...

9.2CVSS5.6AI score0.00056EPSS
Exploits0References3
CVE
CVE
added 2026/02/03 6:30 p.m.7 views

CVE-2026-25238

PEAR framework: Vulnerable before version 1.33.0 due to SQL injection in bug subscription deletion via crafted email value. Root cause is weak email validation that permits SQL injection in the deletion flow. Impact is described as high for confidentiality, integrity, and availability. The issue ...

9.8CVSS5.6AI score0.00056EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/03 12:0 a.m.4 views

PT-2026-6287

Name of the Vulnerable Software and Affected Versions PEAR versions prior to 1.33.0 Description PEAR is a framework and distribution system for reusable PHP components. A SQL injection issue in bug subscription deletion could allow attackers to inject SQL via a crafted email value. The issue was...

9.8CVSS5.7AI score0.00056EPSS
Exploits0References5
Rows per page
Query Builder