CVE-2016-6175

CRITICAL

php-gettext <1.0.12 - Code Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2016-6175. PoCs published by kmkz.

AI-analyzed exploit summary This exploit demonstrates unauthenticated remote code execution in gettext.php <= 1.0.12 via a crafted .mo file. The vulnerability arises from insufficient sanitization of the $string variable before it is passed to eval() in the select_string() function.

Description

Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code via a crafted plural forms header.

Exploits (1)

exploitdb WORKING POC VERIFIED
by kmkz · textwebappsphp
https://www.exploit-db.com/exploits/40154

This exploit demonstrates unauthenticated remote code execution in gettext.php <= 1.0.12 via a crafted .mo file. The vulnerability arises from insufficient sanitization of the $string variable before it is passed to eval() in the select_string() function.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: gettext.php <= 1.0.12
No auth needed
Prerequisites: Ability to upload or modify a .mo file on the target system
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4

Scores

CVSS v3 9.8
EPSS 0.1093
EPSS Percentile 93.6%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-94
Status published
Products (1)
php-gettext_project/php-gettext < 1.0.12
Published Feb 07, 2017
Tracked Since Feb 18, 2026