Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2006-0200

Date: January 13, 2006

Format string vulnerability in the error-reporting feature in the mysqli extension in PHP 5.1.0 and 5.1.1 might allow remote attackers to execute arbitrary code via format string specifiers in MySQL error messages.

Severity Score

Related Resources (13)

http://securityreason.com/securityalert/337
http://secunia.com/advisories/18431
https://exchange.xforce.ibmcloud.com/vulnerabilities/24095
http://www.vupen.com/english/advisories/2006/0177
https://people.canonical.com/~ubuntu-security/cve/CVE-2006-0200
http://www.php.net/release_5_1_2.php
http://securitytracker.com/id?1015485
https://nvd.nist.gov/vuln/detail/CVE-2006-0200
http://www.hardened-php.net/advisory_022006.113.html
http://www.securityfocus.com/archive/1/421705/100/0/threaded
http://www.vupen.com/english/advisories/2006/0369
http://www.securityfocus.com/bid/16219
https://www.mend.io/vulnerability-database/CVE-2006-0200

Severity Score

Weakness Type (CWE)

Use of Externally-Controlled Format String

CWE-134

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): HIGH
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): HIGH
Availability (A): HIGH

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): MEDIUM
Authentication (AU): NONE
Confidentiality (C): COMPLETE
Integrity (I): COMPLETE
Availability (A): COMPLETE
Additional information:

Do you need more information?

Contact Us