PT-2017-8924 · Php · Php-Gettext

CVE-2016-6175

Publicado

2017-02-07

Atualizado

2017-09-03

CVSS v3.1

9.8

Crítica

Vetor

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions php-gettext versions 1.0.12 and earlier

Description The issue allows remote attackers to execute arbitrary PHP code via a crafted plural forms header.

Recommendations For php-gettext versions 1.0.12 and earlier, update to a version later than 1.0.12 to resolve the issue.

Exploit

Correção

Code Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

CVE-2016-6175

Php-Gettext