Description
The money_format function in PHP 5 before 5.2.4, and PHP 4 before 4.4.8, permits multiple (1) %i and (2) %n tokens, which has unknown impact and attack vectors, possibly related to a format string vulnerability.
Remediation
References
Related Vulnerabilities
WordPress Plugin WordPress Books Gallery Unspecified Vulnerability (4.4.1)
Internet Information Services Other Vulnerability (CVE-1999-1451)
WordPress Plugin WordPress Ultra Simple Paypal Shopping Cart Cross-Site Request Forgery (4.4)
Drupal Resource Management Errors Vulnerability (CVE-2014-5266)
WordPress Plugin Simple Download Monitor Multiple Vulnerabilities (3.2.8)