Php-Gettext Project Php-Gettext vulnerabilities

2 known vulnerabilities affecting php-gettext_project/php-gettext.

Total CVEs

2

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

CRITICAL2

Vulnerabilities

Page 1 of 1

CVE-2015-8980CRITICALCVSS 9.8fixed in 1.0.12vbefore 1.0.122019-11-04

CVE-2015-8980 [CRITICAL] CWE-20 CVE-2015-8980: The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attac The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code.

CVE-2016-6175CRITICALCVSS 9.8PoC≤ 1.0.122017-02-07

CVE-2016-6175 [CRITICAL] CWE-94 CVE-2016-6175: Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute ar Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code via a crafted plural forms header.