• info
• discussion
• exploit
• solution
• references

PHP PEAR INSTALL-AS Attribute Arbitrary File Overwrite Vulnerability

An exploit is not required. A proof of concept is available.

• /data/vulnerabilities/exploits/PEAR_poc.txt