exploitDog

CVE-2000-0967

Опубликовано: 19 дек. 2000

Источник: nvd

CVSS2: 10

EPSS Средний

Описание

PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*

cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.26914

Средний

10 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2000-0967

redhat

больше 24 лет назад

PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs.

GHSA-v3f7-v9wm-vwj3

github

около 3 лет назад

PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs.

EPSS

Процентиль: 96%

0.26914

Средний

10 Critical

CVSS2

Дефекты

NVD-CWE-Other