VULNERABILITY INTELLIGENCE
CVE-2007-0909
CVSS score7.5 HIGH
EPSS probability3.30%
CISA KEVNot currently listed
Published2007-02-13
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to (1) all of the *print functions on 64-bit systems, and (2) the odbc_result_all function.