CVE-2007-4658
php php: no CVSS score yet. EPSS 2.0% chance of exploitation in the next 30 days.
The money_format function in PHP 5 before 5.2.4, and PHP 4 before 4.4.8, permits multiple (1) %i and (2) %n tokens, which has unknown impact and attack vectors, possibly related to a format string vulnerability.
- EPSS
- 2.0% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- php:php