SQL Injection

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. PEAR is Vulnerable to SQL Injection in /get/<package>/<version> EndpointCVE-2026-25241pear · CVSS 9.3 · 0.4% likely

   CWE-89

2. PEAR is Vulnerable to SQL Injection in user::maintains() Role IN() FilterCVE-2026-25240pear · CVSS 6.9 · 0.3% likely

   CWE-89

3. PEAR is Vulnerable to SQL Injection in Bug Subscription Deletion via Weak Email ValidationCVE-2026-25238pear · CVSS 9.2 · 0.3% likely

   CWE-89

4. PEAR is Vulnerable to SQL Injection in Damblan_Karma IN() Query via Literal SubstitutionCVE-2026-25236pear · CVSS 6.9 · 0.3% likely

   CWE-89

5. PEAR is Vulnerable to SQL Injection in Category DeletionCVE-2026-25234pear · CVSS 5.3 · 0.3% likely

   CWE-89

6. PEAR is Vulnerable to SQL Injection in apidoc_queue Insert via Unescaped FilenameCVE-2026-25239pear · CVSS 8.2 · 0.2% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.