Php-gettext Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Php-gettext Project records in CISA KEV

No Php-gettext Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Php-gettext 2 records MEDIUM

Records

2 records in Php-gettext · all components

TI-2016-05299 CVE-2016-6175 · GHSA-6f39-vhv8-5hcw

Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to…

MEDIUM 60

Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code via a crafted plural forms header.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.1966 Published 2017-02-07 No fix listed CWE-94

TI-2015-07393 CVE-2015-8980 · GHSA-gxcv-w2wp-7xvm

Improper input validation in php-gettext

MEDIUM 51

The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06379 Published 2019-11-04 Fixed in 1.0.12 CWE-20

Open these records in search →

Critical	2
High	0
Medium	0
Low	0
No CVSS	0