CVE-2020-11084

In iPear, the manual execution of the eval() function can lead to command injection. Only PCs where commands are manually executed via "For Developers" are affected. This function allows executing any PHP code within iPear which may change, damage, or steal data (files) from the PC.

• CWE-78
• CWE-77

• https://github.com/yaBobJonez/iPear/security/advisories/GHSA-4xvp-35fx-hjjjThird Party Advisory
• https://github.com/yaBobJonez/iPear/security/advisories/GHSA-4xvp-35fx-hjjjThird Party Advisory

Published

Jul 14, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-11079node-dns-sync (npm module dns-sync) through 0.2.0 allows exe…9.8
• CVE-2020-1108A denial of service vulnerability exists when .NET Core or .…7.5
• CVE-2020-11080In nghttp2 before version 1.41.0, the overly large HTTP/2 SE…7.5
• CVE-2020-11081osquery before version 4.4.0 enables a privilege escalation …8.2
• CVE-2020-11082In Kaminari before 1.2.1, there is a vulnerability that woul…6.1
• CVE-2020-11083In October from version 1.0.319 and before version 1.0.466, …4.8
• CVE-2020-11085In FreeRDP before 2.1.0, there is an out-of-bounds read in c…3.5
• CVE-2020-11086In FreeRDP less than or equal to 2.0.0, there is an out-of-b…5.4
• CVE-2020-11087In FreeRDP less than or equal to 2.0.0, there is an out-of-b…5.4
• CVE-2020-11088In FreeRDP less than or equal to 2.0.0, there is an out-of-b…5.4
• CVE-2020-11089In FreeRDP before 2.1.0, there is an out-of-bound read in ir…5.5
• CVE-2020-1109An elevation of privilege vulnerability exists when the Wind…7.8