Description
The money_format function in PHP 5 before 5.2.4, and PHP 4 before 4.4.8, permits multiple (1) %i and (2) %n tokens, which has unknown impact and attack vectors, possibly related to a format string vulnerability.
Remediation
References
Related Vulnerabilities
Moodle 7PK - Security Features Vulnerability (CVE-2015-5267)
WordPress Plugin Zendesk Chat Cross-Site Scripting (1.2.5)
Oracle Database Server CVE-2015-0457 Vulnerability (CVE-2015-0457)
WordPress Plugin Supafolio Multiple Unspecified Vulnerabilities (2.1.0)
WordPress Plugin Contact Form Email Cross-Site Scripting (1.1.47)