CVE-2006-0200 Format string vulnerability in the error-reporting feature in the mysqli extension in PHP 5.1.0 and 5.1.1 might allow remote attackers to execute arbitrary code via format string specifiers in MySQL e...
HighCVSS 9.3
EPSS 20.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in the error-reporting feature in the mysqli extension in PHP 5.1.0 and 5.1.1 might allow remote attackers to execute arbitrary code via format string specifiers in MySQL error messages.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| PHP | = 5.1.0 | No fix listed |
| PHP | = 5.1.1 | No fix listed |
References
- 18431 patch third-party-advisory vendor-advisory
- 337 third-party-advisory
- 1015485 vdb-entry
- www.hardened-php.net vendor-advisory
- www.php.net patch
- 20060112 Advisory 02/2006: PHP ext/mysqli Format String Vulnerability mailing-list
- 16219 patch vdb-entry
- ADV-2006-0177 vdb-entry
- ADV-2006-0369 vdb-entry
- php-extmysqli-format-string(24095) vdb-entry