CriticalCVSS 9.8
EPSS 1.3%
pearweb < 1.32 suffers from Deserialization of Untrusted Data.
Product
2 published CVES affecting php pearweb, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
Newest publication first
pearweb < 1.32 suffers from Deserialization of Untrusted Data.
pearweb < 1.32 is suffers from a Weak Password Recovery Mechanism via include/users/passwordmanage.php.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.