CVE-2015-8980

CVE-2015-8980 affects php-gettext up to version 1.0.11, where the plural form in ngettext calls can be exploited to execute arbitrary code. The root cause is mishandling of input in Gettext, leading to remote code execution. Affected advisories reference Ubuntu USN-4779-1, Mageia MGASA-2017-0038,...

CVE-2016-6175

The vulnerability CVE-2016-6175 affects php-gettext up to version 1.0.12, where eval injection in the plural forms header allows remote attackers to execute arbitrary PHP code. Exploitation is evidenced by an in-the-wild exploit (Exploit-DB entry) and multiple security feeds. The issue is caused ...