Description
Format string vulnerability in the php_snmp_error function in ext/snmp/snmp.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via format string specifiers in an SNMP::get call.
Remediation
References
Related Vulnerabilities
Oracle JRE Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-10356)
Lighttpd Other Vulnerability (CVE-2007-1870)
WordPress Plugin PowerPack Pro for Elementor Privilege Escalation (2.10.14)
WordPress Plugin Image Slider Arbitrary File Deletion (1.1.89)
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2020-1439)