PEAR::Auth version less than 1.2.4 and 1.3.0r4 suffer from SQL injection flaws.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/44142/pearAuthSQL.txt
Source: https://packetstormsecurity.com/files/44142/pearAuthSQL.txt.html