pearweb — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in pearweb, with AI-generated Chinese analysis, references, and POCs.

Vendor: pear

CVE ID	Title	CVSS	Severity	Published
CVE-2026-25241	PEAR is Vulnerable to SQL Injection in /get/<package>/<version> Endpoint CWE-89	9.8^AI	Critical^AI	2026-02-03
CVE-2026-25240	PEAR is Vulnerable to SQL Injection in user::maintains() Role IN() Filter CWE-89	8.8^AI	High^AI	2026-02-03
CVE-2026-25239	PEAR is Vulnerable to SQL Injection in apidoc_queue Insert via Unescaped Filename CWE-89	9.1^AI	Critical^AI	2026-02-03
CVE-2026-25238	PEAR is Vulnerable to SQL Injection in Bug Subscription Deletion via Weak Email Validation CWE-89	9.8^AI	Critical^AI	2026-02-03
CVE-2026-25237	PEAR is Vulnerable to PHP Code Execution via preg_replace /e in Bug Update Emails CWE-624	9.8^AI	Critical^AI	2026-02-03
CVE-2026-25236	PEAR is Vulnerable to SQL Injection in Damblan_Karma IN() Query via Literal Substitution CWE-89	9.8^AI	Critical^AI	2026-02-03
CVE-2026-25235	PEAR Has a Predictable Verification Hash in Election Account Requests CWE-337	9.1^AI	Critical^AI	2026-02-03
CVE-2026-25234	PEAR is Vulnerable to SQL Injection in Category Deletion CWE-89	8.8^AI	High^AI	2026-02-03
CVE-2026-25233	PEAR Has a Roadmap Authorization Bypass via Operator Precedence Bug CWE-783	5.4^AI	Medium^AI	2026-02-03

All 9 known CVE vulnerabilities affecting pearweb with full Chinese analysis, references, and POCs where available.