Skip to content
CVE PROGRAM SOURCE RECORD9.2 Critical

CVE-2026-25238

PEAR is Vulnerable to SQL Injection in Bug Subscription Deletion via Weak Email Validation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulnerability in bug subscription deletion may allow attackers to inject SQL via a crafted email value. This issue has been patched in version 1.33.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

pear pearweb

  • < 1.33.0affected

References