CVE-2006-0200
NoneCVSS
—
EPSS
20.0%
Published
Jan 13, 2006
CISA due date
—
The record
Format string vulnerability in the error-reporting feature in the mysqli extension in PHP 5.1.0 and 5.1.1 might allow remote attackers to execute arbitrary code via format string specifiers in MySQL error messages.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-63073 Issue summary: OpenSSL CMP response validation passed an unexpected response sender… CWE-134
- CVE-2026-6390 A flaw was found in GNU nano's multi-buffer error message handling. CWE-134
- CVE-2026-57877 An unauthenticated format string vulnerability exists in vlsvr in GeoVision GV-LPC2011… CWE-134
- CVE-2026-10828 A format string vulnerability has been found in the "alias" parameter of the Serial Param… CWE-134
- CVE-2025-10262 Nokia SR Linux is vulnerable to local privilege escalation vulnerability due to… CWE-134
- CVE-2026-12174 A security vulnerability has been detected in D-Link DCS-935L 1.10.01. CWE-134
- CVE-2026-6250 An authenticated format string vulnerability exists in the ONVIF service of Tapo C110 v2… CWE-134
- CVE-2026-6241 An authenticated format string vulnerability is present in the ONVIF AddScopes in Tapo… CWE-134