← Database

CVE-2007-4658

HIGH CVSS: 7.5 Published: 2007-09-04 Modified: 2026-06-16

Description

The money_format function in PHP 5 before 5.2.4, and PHP 4 before 4.4.8, permits multiple (1) %i and (2) %n tokens, which has unknown impact and attack vectors, possibly related to a format string vulnerability.

Affected Platforms

Php Php

Weakness Type

NVD-CWE-Other

References