UBUNTU-CVE-2026-48842

Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuserquery plugin via a pregreplace backslash escape bypass...

CVE-2026-48842

Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuserquery plugin via a pregreplace backslash escape bypass...

CVE-2026-25237

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, use of pregreplace with the /e modifier in bug update email handling can enable PHP code execution if attacker-controlled content reaches the evaluated replacement. This issue has been patched in...

PT-2026-6286

Name of the Vulnerable Software and Affected Versions PEAR versions prior to 1.33.0 Description PEAR, a framework for reusable PHP components, contains a flaw related to the use of the preg replace function with the /e modifier. This can lead to PHP code execution if attacker-controlled content i...

EUVD-2025-25172

Malicious code in bioql PyPI...

CVE-2025-9277

The SiteSEO – SEO Simplified plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the broken pregreplace expression in all versions up to, and including, 1.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2025-50567

Saurus CMS Community Edition version 4.7.1 is vulnerable to a security flaw within the custom DB::prepare() function. The root cause is the use of preg_replace() with the deprecated /e (eval) modifier to interpolate SQL query parameters, which allows for the injection of user-controlled SQL state...

PHPMailer < 5.2.10 'html2text' Library RCE Vulnerability

PHPMailer is prone to a remote code execution RCE vulnerability within the shipped Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

PT-2018-12222

Name of the Vulnerable Software and Affected Versions yTakkar Instagram-clone through 2018-04-23 Description The issue is related to inadequate XSS protection based on preg replace, allowing for XSS via an onmouseover payload in the edit requests.php file. Recommendations For yTakkar...

PT-2014-8777

Name of the Vulnerable Software and Affected Versions X7 Chat versions 2.0.0 through 2.0.5.1 Description The issue allows remote authenticated users to execute arbitrary PHP code via a crafted HTTP header to "index.php", which is processed by the preg replace function with the eval switch. This c...

PT-2016-6664

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.0.x through 4.0.10.15 phpMyAdmin versions 4.4.x through 4.4.15.6 phpMyAdmin versions 4.6.x through 4.6.2 Description The issue arises from improper delimiter selection, which could allow remote attackers to execute...

PT-2013-4244

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 3.5.x through 3.5.7 phpMyAdmin versions 4.x through 4.0.0-rc2 Description The issue allows remote authenticated users to execute arbitrary code via a /ex00 sequence. This sequence is not properly handled before making a pre...

PT-2012-5835

Name of the Vulnerable Software and Affected Versions vBSEO versions 3.5.0 through 3.6.0 and earlier Description The issue allows remote attackers to insert and execute arbitrary PHP code via "complex curly syntax" in the char repl parameter. This parameter is inserted into a regular expression...