CVE-2017-5677

Critical

Published: 06/02/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

PEAR HTML_AJAX versions 0.3.0 through 0.5.7 has a PHP Object Injection Vulnerability in the PHP Serializer, allowing remote code execution. The root cause is an incorrect regular expression.

Risk Assessment

This vulnerability can lead to remote code execution, posing a serious security threat to systems using this library.

Recommendation

It is recommended to update PEAR HTML_AJAX to the latest version to mitigate this vulnerability.

Original NVD description (English source)

PEAR HTML_AJAX 0.3.0 through 0.5.7 has a PHP Object Injection Vulnerability in the PHP Serializer. It allows remote code execution. In one viewpoint, the root cause is an incorrect regular expression.