{"id":"CVE-2020-11084","url":"https://www.cyber-defence.io/tools/cve/CVE-2020-11084","generatedAt":"2026-10-27T23:26:39.621Z","title":"In iPear, the manual execution of the eval() function can lead to command injection.","description":"In iPear, the manual execution of the eval() function can lead to command injection. Only PCs where commands are manually executed via \"For Developers\" are affected. This function allows executing any PHP code within iPear which may change, damage, or steal data (files) from the PC.","published":"2020-07-14T22:15:11.000Z","lastModified":"2026-06-17T02:49:01.000Z","status":"Modified","sourceIdentifier":"security-advisories@github.com","cvss":{"version":"3.1","score":5.4,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},"cwe":["CWE-78","CWE-77"],"affected":["ipear project/ipear"],"epss":{"score":0.01429,"percentile":0.7282,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (1.43%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://github.com/yaBobJonez/iPear/security/advisories/GHSA-4xvp-35fx-hjjj","tags":["Third Party Advisory"],"source":"security-advisories@github.com"},{"url":"https://github.com/yaBobJonez/iPear/security/advisories/GHSA-4xvp-35fx-hjjj","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-11084","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}