Vulnerabilities > PHP Gettext Project

DATE CVE VULNERABILITY TITLE RISK
2019-11-04 CVE-2015-8980 Improper Input Validation vulnerability in multiple products
The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code.
7.5
2017-02-07 CVE-2016-6175 Code Injection vulnerability in PHP-Gettext Project PHP-Gettext
Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code via a crafted plural forms header.
network
low complexity
php-gettext-project CWE-94
7.5