← Database

CVE-2000-0967

CRITICAL CVSS: 10.0 Published: 2000-12-19 Modified: 2026-06-16

Description

PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs.

Affected Platforms

Php Php

Weakness Type

NVD-CWE-Other

References