CVE-2016-6175

Critical

Published: 07/02/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code via a crafted plural forms header.

Risk Assessment

Attackers can exploit this vulnerability to remotely execute code, potentially leading to system takeover or data leakage.

Recommendation

It is recommended to update php-gettext to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code via a crafted plural forms header.