CVE-2021-29378: Pearadmin PEAR Admin Think

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

SQL Injection in pear-admin-think version 2.1.2, allows attackers to execute arbitrary code and escalate privileges via crafted GET request to Crud.php.

Affected products

• Pearadmin PEAR Admin Think: version 2.1.2 only

Published 2023-08-11. Last modified 2026-06-17.