Vulnerability Database

300,445

Total vulnerabilities in the database

CVE-2015-8617

Format string vulnerability in the zend_throw_or_error function in Zend/zend_execute_API.c in PHP 7.x before 7.0.1 allows remote attackers to execute arbitrary code via format string specifiers in a string that is misused as a class name, leading to incorrect error handling.

  • Published: Jan 19, 2016
  • Updated: Nov 9, 2025
  • CVE: CVE-2015-8617
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 10
  • AV:N/AC:L/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
php / php 7.0.1 7.0.1.x