Php-gettext Project - vulnerabilities (CVEs)

2 CVEs in 1 products, 0 in the last 30 days, newest from 2019-11-04.

Products

• Php-gettext - 2 CVEs

Newest CVEs of Php-gettext Project

• CVE-2015-8980 - CVSS 9.8 (critical), 2019-11-04: The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code.
• CVE-2016-6175 - CVSS 9.8 (critical), 2017-02-07: Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code via a crafted plural forms header.