PEAR Base System version 1.10.1 and Installer's download utility suffer from an arbitrary file download vulnerability. Continue reading...