php-gettext project vulnerabilities

Products

• php-gettext 2

Latest php-gettext project CVEs

Newest publication first

1. CVE-2015-8980 The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code.

   Published 2019-11-04

   Critical·CVSS 9.8 EPSS 6.4%

   The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code.

2. CVE-2016-6175 Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code via a crafted plural forms header.

   Published 2017-02-07

   Critical·CVSS 9.8 EPSS 19.7% Public exploit

   Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code via a crafted plural forms header.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.