6 matches found
CVE-2022-27158
pearweb 1.32 suffers from Deserialization of Untrusted Data...
CVE-2022-27157
pearweb 1.32 is suffers from a Weak Password Recovery Mechanism via include/users/passwordmanage.php...
EUVD-2022-31694
Malicious code in bioql PyPI...
Default credentials
pearweb 1.32 is suffers from a Weak Password Recovery Mechanism via include/users/passwordmanage.php...
CVE-2022-27158
pearweb 1.32 suffers from Deserialization of Untrusted Data...
PEAR MT Random Time Code Execution
The vulnerability in the implementation of the mtrand and time functions in the pearweb package’s PHP class library in the PEAR library is related to the use of an insufficiently secure MD5 encryption algorithm. Exploiting this vulnerability could allow an attacker to gain unauthorized access to...