← Database

CVE-2006-0200

CRITICAL CVSS: 9.3 Published: 2006-01-13 Modified: 2026-06-16

Description

Format string vulnerability in the error-reporting feature in the mysqli extension in PHP 5.1.0 and 5.1.1 might allow remote attackers to execute arbitrary code via format string specifiers in MySQL error messages.

Affected Platforms

Php Php

Weakness Type

CWE-134

References