CVE-2006-0200: PHP

High severity, CVSS 9.3. EPSS: 19.4% chance of exploitation in the next 30 days.

Format string vulnerability in the error-reporting feature in the mysqli extension in PHP 5.1.0 and 5.1.1 might allow remote attackers to execute arbitrary code via format string specifiers in MySQL error messages.

Affected products

• PHP PHP: version 5.1.0 only; version 5.1.1 only

Published 2006-01-13. Last modified 2026-06-16.