Vulnerabilities > PHP > Pearweb > Critical

DATE CVE VULNERABILITY TITLE RISK
2022-04-15 CVE-2022-27158 Deserialization of Untrusted Data vulnerability in PHP Pearweb
pearweb < 1.32 suffers from Deserialization of Untrusted Data.
network
low complexity
php CWE-502
critical
9.8
2022-04-15 CVE-2022-27157 Weak Password Recovery Mechanism for Forgotten Password vulnerability in PHP Pearweb
pearweb < 1.32 is suffers from a Weak Password Recovery Mechanism via include/users/passwordmanage.php.
network
low complexity
php CWE-640
critical
9.8