CVE:CVE-2017-5677
CNNVD:CNNVD-201702-110
PEAR（全称PHP Extension and Application Repository）是PHP Group负责维护的一个PHP扩展及应用的代码仓库。HTML_AJAX是其中的一个提供用于执行AJAX的PHP和JavaScript库。
PEAR HTML_AJAX 0.3.0版本至0.5.7版本中的PHP Serializer存在PHP对象注入漏洞。远程攻击者可利用该漏洞执行代码。
solution:Upgrade pear html_ajax to a higher version than 0.3.0,0.3.1,0.3.2,0.3.3,0.3.4,0.4.0,0.4.1,0.5.0,0.5.1,0.5.2,0.5.3,0.5.4,0.5.5,0.5.6,0.5.7,and avoid the version 0.3.0,0.3.1,0.3.2,0.3.3,0.3.4,0.4.0,0.4.1,0.5.0,0.5.1,0.5.2,0.5.3,0.5.4,0.5.5,0.5.6,0.5.7