Design/Logic Flaw

2017-02-0618:59:00

PRIOn knowledge base

www.prio-n.com

9.8 High

AI Score

Confidence

High

0.083 Low

EPSS

Percentile

94.4%

JSON

PEAR HTML_AJAX 0.3.0 through 0.5.7 has a PHP Object Injection Vulnerability in the PHP Serializer. It allows remote code execution. In one viewpoint, the root cause is an incorrect regular expression.

CPENameOperatorVersion
html_ajaxeq0.5.0
html_ajaxeq0.3.0
html_ajaxeq0.5.1
html_ajaxeq0.5.2
html_ajaxeq0.5.5
html_ajaxeq0.5.4
html_ajaxeq0.3.1
html_ajaxeq0.5.3
html_ajaxeq0.3.4
html_ajaxeq0.5.7

Name	Operator	Version
html_ajax	eq	0.5.0
html_ajax	eq	0.3.0
html_ajax	eq	0.5.1
html_ajax	eq	0.5.2
html_ajax	eq	0.5.5
html_ajax	eq	0.5.4
html_ajax	eq	0.3.1
html_ajax	eq	0.5.3
html_ajax	eq	0.3.4
html_ajax	eq	0.5.7