The money_format function in PHP 5 before 5.2.4, and PHP 4 before 4.4.8, permits multiple (1) %i and (2) %n tokens, which has unknown impact and attack vectors, possibly related to a format string vulnerability.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade php4Upgrade php5 | Dec 10, 2025 | Sep 11, 2007 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Sep 4, 2007 |
| Oracle_linux | — | Upgrade php-mbstringUpgrade php-ldapUpgrade php-commonUpgrade php-snmpUpgrade php-mysqlUpgrade php-cliUpgrade phpUpgrade php-odbcUpgrade php-xmlUpgrade php-develUpgrade php-xmlrpcUpgrade php-bcmathUpgrade php-pdoUpgrade php-pgsqlUpgrade php-soapUpgrade php-ncursesUpgrade php-imapUpgrade php-dbaUpgrade php-gd | Oct 16, 2024 | Sep 4, 2007 |
| Php | — | Upgrade to PHP version 4.4.8Upgrade to PHP version 5.2.4 | Oct 1, 2012 | Sep 4, 2007 |
| Suse | — | Upgrade php5-ncursesUpgrade php5-exifUpgrade php5-tokenizerUpgrade php5-zipUpgrade php5-gmpUpgrade php5-bz2Upgrade php4-shmopUpgrade php5-iconvUpgrade php5-mbstringUpgrade php5-socketsUpgrade php4-sessionUpgrade php5-ldapUpgrade apache-mod_php4Upgrade php4-wddxUpgrade php5-curlUpgrade php5-suhosinUpgrade php4-dbaUpgrade php4-sysvsemUpgrade apache2-mod_php4Upgrade mod_php4-apache2Upgrade php4-ftpUpgrade php5-jsonUpgrade php5-mysqlUpgrade php5-sqliteUpgrade php5-opensslUpgrade php4-snmpUpgrade php4-imapUpgrade php4-mhashUpgrade php4-ctypeUpgrade php5-hashUpgrade php5-pearUpgrade php4-domxmlUpgrade php4-calendarUpgrade php5-sysvshmUpgrade php4-gettextUpgrade php4-pgsqlUpgrade php4-mcryptUpgrade php4-ypUpgrade php4-bcmathUpgrade php4-readlineUpgrade php5-sysvsemUpgrade php5-pdoUpgrade php4-iconvUpgrade php5-pcntlUpgrade php5-gdUpgrade php5-sysvmsgUpgrade php5-pspellUpgrade php5-fastcgiUpgrade php4-mcalUpgrade php4-gmpUpgrade php5-develUpgrade php5-bcmathUpgrade php5-xmlrpcUpgrade php4-fastcgiUpgrade suse-releaseUpgrade php4-fileproUpgrade php5-posixUpgrade php4-curlUpgrade php4-develUpgrade php5-xmlreaderUpgrade php4-bz2Upgrade php5-calendarUpgrade php5-xslUpgrade php5-mhashUpgrade php5-shmopUpgrade php5-odbcUpgrade php4-ldapUpgrade php4-gd | Feb 17, 2015 | Sep 4, 2007 |
| Ubuntu | — | Upgrade php5-cgiUpgrade libapache2-mod-php5Upgrade php5-cli | Nov 8, 2024 | Sep 4, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub