Php-Gettext Project: >> Php-Gettext >> 1.0.6 Security Vulnerabilities
The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code.
CVSS Score
9.8
EPSS Score
0.045
Published
2019-11-04
Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code via a crafted plural forms header.
CVSS Score
9.8
EPSS Score
0.146
Published
2017-02-07