smarty3 vulnerabilities (Debian)
31 vulnerabilities.
-
smarty3Debian Smarty before 4.5.8 and 5.x before 5.8.5 PHP Code Injection via extends: Inheritance Cache 9.2 Critical -
smarty3Debian Smarty: SSRF via redirect bypass of trusted_uri using {fetch} 6.9 Medium -
smarty3Debian Smarty: Symlink path traversal out of trusted directories 6.9 Medium -
smarty3Debian PHP Code Injection by malicious attribute in extends-tag in Smarty 7.3 High -
smarty3Debian Cross site scripting vulnerability in Javascript escaping in smarty/smarty 7.1 High -
smarty3Debian Smarty Cross-site Scripting vulnerability in pages that use smarty_function_mailto 5.4 Medium -
smarty3Debian PHP Code Injection by malicious block or filename in Smarty 8.8 High -
smarty3Debian Sandbox Escape by math function in smarty 8.1 High -
smarty3Debian Access to restricted PHP code by dynamic static class access in smarty 8.8 High -
smarty3Debian smarty3 - regression update No score -
smarty3Debian smarty3 - regression update No score -
smarty3Debian PHP Code Injection by malicious function name in smarty 9.8 Critical -
smarty3Debian Sandbox escape through template_object in smarty 7.5 High -
smarty3Debian Smarty3 Arbitrary PHP Code Execution 9.8 Critical -
smarty3Debian Smarty Path Traversal Vulnerability 7.5 High -
smarty3Debian Smarty Path Traversal Vulnerability 5.9 Medium -
smarty3Debian smarty3 - regression update No score -
smarty3Debian smarty3 - regression update No score -
smarty3Debian Smarty PHP code injection 9.8 Critical -
smarty3Debian Smarty arbitrary PHP code execution 7.5 High -
smarty3Debian Cross-site Scripting in SmartyException 4.3 Medium -
smarty3Debian Cross-site scripting (XSS) vulnerability in the smarty_function_html_options_optoutput function... 4.3 Medium -
smarty3Debian Smarty before 3.0.0 beta 7 does not properly handle the <?php and ?> tags, which has unspecified... 10.0 High -
smarty3Debian Unspecified vulnerability in the math plugin in Smarty before 3.0.0 RC1 has unknown impact and... 10.0 High -
smarty3Debian Smarty before 3.0.0 RC3 does not properly handle an on value of the asp_tags option in the php... 10.0 High -
smarty3Debian Multiple unspecified vulnerabilities in the parser implementation in Smarty before 3.0.0 RC3 have... 10.0 High -
smarty3Debian Smarty before 3.0.0, when security is enabled, does not prevent access to the (1) dynamic and (2)... 9.3 High -
smarty3Debian Unspecified vulnerability in the fetch plugin in Smarty before 3.0.2 has unknown impact and... 10.0 High -
smarty3Debian Smarty Does Not Consider Umask Values When Setting Permissions 7.5 High -
smarty3Debian Unspecified vulnerability in Smarty before 3.0.0 beta 6 allows remote attackers to execute... 7.5 High -
smarty3Debian Multiple unspecified vulnerabilities in Smarty before 3.0.0 beta 6 have unknown impact and attack... 10.0 High