Skip to content
Noroxi

pearadmin records

6 published records for vendor pearadmin.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 21
  2. 22
  3. 23
  4. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

6 records
  • CVE-2021-29377
    39Monitor

    Pear Admin Think through 2.1.2 has an arbitrary file upload vulnerability that allows attackers to execute arbitrary code remotely.

    CriticalCVSS 9.8No exploitEPSS 2%

    pearadmin · pearadmin thinkAug 12, 2021

  • CVE-2021-29378
    35Monitor

    SQL Injection in pear-admin-think version 2.1.2, allows attackers to execute arbitrary code and escalate privileges via crafted GET request

    HighCVSS 8.8No exploitEPSS 1%

    pearadmin · pear admin thinkAug 11, 2023

  • CVE-2022-23903
    21Monitor

    A Cross Site Scripting (XSS) vulnerability exists in pearadmin pear-admin-think <=5.0.6, which allows a login account to access arbitrary fu

    MediumCVSS 5.4No exploitEPSS 1%

    pearadmin · pear admin thinkMar 29, 2022

  • CVE-2024-6241
    21Monitor

    Pear Admin Boot getDictItems sql injection

    MediumCVSS 5.3No exploitEPSS 1%

    pearadmin · pear admin bootJun 21, 2024

  • CVE-2024-6266
    21Monitor

    Pear Admin Boot loadDictItem sql injection

    MediumCVSS 5.3No exploitEPSS 1%

    pearadmin · pear admin bootJun 22, 2024

  • CVE-2023-30417
    21Monitor

    A cross-site scripting (XSS) vulnerability in Pear-Admin-Boot up to v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a c

    MediumCVSS 5.4No exploitEPSS 0%

    pearadmin · pear admin bootApr 25, 2023