CVE Database
/

CVE-2007-4658

Back to search

CVE-2007-4658

Published: Sep 4, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

The money_format function in PHP 5 before 5.2.4, and PHP 4 before 4.4.8, permits multiple (1) %i and (2) %n tokens, which has unknown impact and attack vectors, possibly related to a format string vulnerability.

VendorProductVersions

n/a

n/a

affected
n/a

References

26822
third-party-advisory
x_refsource_SECUNIA
php-moneyformat-unspecified(36377)
vdb-entry
x_refsource_XF
SUSE-SA:2008:004
vendor-advisory
x_refsource_SUSE
ADV-2008-0059
vdb-entry
x_refsource_VUPEN
28658
third-party-advisory
x_refsource_SECUNIA
FEDORA-2007-709
vendor-advisory
x_refsource_FEDORA
26967
third-party-advisory
x_refsource_SECUNIA
DSA-1444
vendor-advisory
x_refsource_DEBIAN
GLSA-200710-02
vendor-advisory
x_refsource_GENTOO
27864
third-party-advisory
x_refsource_SECUNIA
oval:org.mitre.oval:def:10363
vdb-entry
signature
x_refsource_OVAL
SSA:2008-045-03
vendor-advisory
x_refsource_SLACKWARE
28936
third-party-advisory
x_refsource_SECUNIA
26930
third-party-advisory
x_refsource_SECUNIA
2007-0026
vendor-advisory
x_refsource_TRUSTIX
RHSA-2007:0889
vendor-advisory
x_refsource_REDHAT
USN-549-1
vendor-advisory
x_refsource_UBUNTU
28249
third-party-advisory
x_refsource_SECUNIA
27545
third-party-advisory
x_refsource_SECUNIA
26838
third-party-advisory
x_refsource_SECUNIA
27377
third-party-advisory
x_refsource_SECUNIA
MDKSA-2007:187
vendor-advisory
x_refsource_MANDRIVA
27102
third-party-advisory
x_refsource_SECUNIA
ADV-2007-3023
vdb-entry
x_refsource_VUPEN
26895
third-party-advisory
x_refsource_SECUNIA
USN-549-2
vendor-advisory
x_refsource_UBUNTU
RHSA-2007:0890
vendor-advisory
x_refsource_REDHAT
RHSA-2007:0891
vendor-advisory
x_refsource_REDHAT
26871
third-party-advisory
x_refsource_SECUNIA
26642
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now