Skip to main content

Vendor archive

pearadmin CVEs

Beta · best-effort

6 CVEs tagged to vendor pearadmin1 Critical, 1 High, 4 Medium, 0 Low, 0 Unrated.

CVE-2024-6266

Published Jun 23, 2024

A vulnerability classified as critical has been found in Pear Admin Boot up to 2.0.2. Affected is an unknown function of the file /system/dictData/loadDictItem. The manipulation l…

CVSS 5.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2024-6241

Published Jun 21, 2024

A vulnerability was found in Pear Admin Boot up to 2.0.2 and classified as critical. This issue affects the function getDictItems of the file /system/dictData/getDictItems/. The m…

CVSS 5.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2021-29378

Published Aug 11, 2023

SQL Injection in pear-admin-think version 2.1.2, allows attackers to execute arbitrary code and escalate privileges via crafted GET request to Crud.php.

CVSS 8.8 · High
Vendor/product tagsBeta · best-effort

CVE-2023-30417

Published Apr 25, 2023

A cross-site scripting (XSS) vulnerability in Pear-Admin-Boot up to v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title…

CVSS 5.4 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-23903

Published Mar 29, 2022

A Cross Site Scripting (XSS) vulnerability exists in pearadmin pear-admin-think <=5.0.6, which allows a login account to access arbitrary functions and cause stored XSS through a…

CVSS 5.4 · Medium
Vendor/product tagsBeta · best-effort

CVE-2021-29377

Published Aug 12, 2021

Pear Admin Think through 2.1.2 has an arbitrary file upload vulnerability that allows attackers to execute arbitrary code remotely. A .php file can be uploaded via admin.php/index…

CVSS 9.8 · Critical
Vendor/product tagsBeta · best-effort
Showing 1-6 of 6 CVEsPage 1 of 1