VULNERABILITY INTELLIGENCE
CVE-2000-0967
CVSS score10 HIGH
EPSS probability20.63%
CISA KEVNot currently listed
Published2000-12-19
Last modified2026-09-23
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs.