CVE-2000-0967

PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers...

10.0 HighPublic exploit

PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs.

Exploit likelihood

20.6%Up 8.1 points since Feb 4, 2022

What each source reports

NVD Score used 10.0

Record: CVE-2000-0967
CVSS 2.0: 10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated: 2026-11-02

CVE List No score

Record: CVE-2000-0967
Updated: 2026-11-02

EUVDEUVD-2000-0954 No score

Record: EUVD-2000-0954
Updated: 2026-11-03

GitHub AdvisoriesGHSA-v3f7-v9wm-vwj3 No score

PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers...

Record: GHSA-v3f7-v9wm-vwj3
Updated: 2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	PHP 3.0/4.0 - Error Logging Format String	2000-10-12
Exploit-DB	PHP 3.0.16/4.0.2 - Remote Format Overflow	2000-12-06

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2000-0967 is a high vulnerability (CVSS 10.0) in Php, published December 19, 2000. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 20.6%, the 97th percentile. No source names a fixed version.

References

Show 4 moreShow less