CVE-2000-0967

PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*
cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2000-12-19 05:00

Updated : 2023-12-10 10:17


NVD link : CVE-2000-0967

Mitre link : CVE-2000-0967

CVE.ORG link : CVE-2000-0967


JSON object : View

Products Affected

php

  • php