Smarty vulnerabilities

Products

• Smarty 31

Newest

• presspage entertainment inc. smarty for wordpress, smarty +1 more WordPress Smarty for WordPress Plugin <= 3.1.35 is vulnerable to Cross Site Scripting (XSS) CVE-2023-41661 5.9 MediumSeptember 29, 2023
• smarty, fedoraproject fedora +1 more Cross site scripting vulnerability in Javascript escaping in smarty/smarty CVE-2023-28447 Public exploitFix available 7.1 HighMarch 28, 2023
• smarty, debian linux +1 more Smarty Cross-site Scripting vulnerability in pages that use smarty_function_mailto CVE-2018-25047 Fix available 5.4 MediumSeptember 14, 2022
• smarty, debian linux, fedoraproject fedora +2 more PHP Code Injection by malicious block or filename in Smarty CVE-2022-29221 Public exploitFix available 8.8 HighMay 24, 2022
• smarty, debian linux, fedoraproject fedora +2 more Sandbox Escape by math function in smarty CVE-2021-29454 Fix available 8.1 HighJanuary 10, 2022
• smarty, debian linux, fedoraproject fedora +2 more Access to restricted PHP code by dynamic static class access in smarty CVE-2021-21408 Fix available 8.8 HighJanuary 10, 2022
• smarty, debian linux +1 more PHP Code Injection by malicious function name in smarty CVE-2021-26120 Fix available EPSS 82.3% 9.8 CriticalFebruary 22, 2021
• smarty, debian linux +1 more Sandbox escape through template_object in smarty CVE-2021-26119 Fix available 7.5 HighFebruary 22, 2021
• smarty, smarty3, debian linux +2 more Smarty3 Arbitrary PHP Code Execution CVE-2011-1028 Fix available 9.8 CriticalNovember 20, 2019
• smarty, debian linux +1 more Smarty Path Traversal Vulnerability CVE-2018-13982 Fix available 7.5 HighSeptember 18, 2018
• smarty Smarty Path Traversal Vulnerability CVE-2018-16831 Fix available 5.9 MediumSeptember 11, 2018
• smarty Smarty PHP code injection CVE-2017-1000480 Fix available 9.8 CriticalJanuary 3, 2018
• smarty Smarty arbitrary PHP code execution CVE-2014-8350 Fix available 7.5 HighNovember 3, 2014
• smarty Cross-site Scripting in SmartyException CVE-2012-4437 Fix available 4.3 MediumOctober 1, 2012
• smarty Cross-site scripting (XSS) vulnerability in the smarty_function_html_options_optoutput function... CVE-2012-4277 Fix available 4.3 MediumAugust 13, 2012
• smarty Smarty before 3.0.0 beta 7 does not properly handle the <?php and ?> tags, which has unspecified... CVE-2010-4727 Fix available 10.0 HighFebruary 3, 2011
• smarty Unspecified vulnerability in the math plugin in Smarty before 3.0.0 RC1 has unknown impact and... CVE-2010-4726 Fix available 10.0 HighFebruary 3, 2011
• smarty Smarty before 3.0.0 RC3 does not properly handle an on value of the asp_tags option in the php... CVE-2010-4725 Fix available 10.0 HighFebruary 3, 2011
• smarty Multiple unspecified vulnerabilities in the parser implementation in Smarty before 3.0.0 RC3 have... CVE-2010-4724 Fix available 10.0 HighFebruary 3, 2011
• smarty Smarty before 3.0.0, when security is enabled, does not prevent access to the (1) dynamic and (2)... CVE-2010-4723 Fix available 9.3 HighFebruary 3, 2011
• smarty Unspecified vulnerability in the fetch plugin in Smarty before 3.0.2 has unknown impact and... CVE-2010-4722 Fix available 10.0 HighFebruary 3, 2011
• smarty Smarty Does Not Consider Umask Values When Setting Permissions CVE-2009-5054 Fix available 7.5 HighFebruary 3, 2011
• smarty Unspecified vulnerability in Smarty before 3.0.0 beta 6 allows remote attackers to execute... CVE-2009-5053 Fix available 7.5 HighFebruary 3, 2011
• smarty Multiple unspecified vulnerabilities in Smarty before 3.0.0 beta 6 have unknown impact and attack... CVE-2009-5052 Fix available 10.0 HighFebruary 3, 2011
• smarty The smarty_function_math function in libs/plugins/function.math.php in Smarty 2.6.22 allows... CVE-2009-1669 Public exploitFix available EPSS 14.1% 10.0 HighMay 18, 2009
• smarty The _expand_quoted_text function in libs/Smarty_Compiler.class.php in Smarty 2.6.20 r2797 and... CVE-2008-4811 Fix available 7.5 HighOctober 31, 2008
• smarty The _expand_quoted_text function in libs/Smarty_Compiler.class.php in Smarty 2.6.20 before r2797... CVE-2008-4810 Fix available 7.5 HighOctober 31, 2008
• smarty The modifier.regex_replace.php plugin in Smarty before 2.6.19, as used by Serendipity (S9Y) and... CVE-2008-1066 Fix available 7.5 HighFebruary 28, 2008
• smarty ** DISPUTED ** PHP remote file inclusion vulnerability in unit_test/test_cases.php in Smarty 2.6... CVE-2006-7193 Disputed 7.5 HighApril 12, 2007
• smarty ** DISPUTED ** PHP remote file inclusion vulnerability in libs/Smarty.class.php in Smarty 2.6.9... CVE-2006-7105 Disputed 7.5 HighMarch 3, 2007
• smarty Unknown vulnerability in the regex_replace modifier (modifier.regex_replace.php) in Smarty before... CVE-2005-0913 7.5 HighMarch 29, 2005