10

CVE-2010-4727

Smarty before 3.0.0 beta 7 does not properly handle the <?php and ?> tags, which has unspecified impact and remote attack vectors.

Data is provided by the National Vulnerability Database (NVD)
Smarty ≫ Smarty Updatebeta6 Version <= 3.0.0
Smarty ≫ Smarty Version1.0
Smarty ≫ Smarty Version1.0a
Smarty ≫ Smarty Version1.0b
Smarty ≫ Smarty Version1.1.0
Smarty ≫ Smarty Version1.2.0
Smarty ≫ Smarty Version1.2.1
Smarty ≫ Smarty Version1.2.2
Smarty ≫ Smarty Version1.3.0
Smarty ≫ Smarty Version1.3.1
Smarty ≫ Smarty Version1.3.2
Smarty ≫ Smarty Version1.4.0
Smarty ≫ Smarty Version1.4.0 Updateb1
Smarty ≫ Smarty Version1.4.0 Updateb2
Smarty ≫ Smarty Version1.4.1
Smarty ≫ Smarty Version1.4.2
Smarty ≫ Smarty Version1.4.3
Smarty ≫ Smarty Version1.4.4
Smarty ≫ Smarty Version1.4.5
Smarty ≫ Smarty Version1.4.6
Smarty ≫ Smarty Version1.5.0
Smarty ≫ Smarty Version1.5.1
Smarty ≫ Smarty Version1.5.2
Smarty ≫ Smarty Version2.0.0
Smarty ≫ Smarty Version2.0.1
Smarty ≫ Smarty Version2.1.0
Smarty ≫ Smarty Version2.1.1
Smarty ≫ Smarty Version2.2.0
Smarty ≫ Smarty Version2.3.0
Smarty ≫ Smarty Version2.3.1
Smarty ≫ Smarty Version2.4.0
Smarty ≫ Smarty Version2.4.1
Smarty ≫ Smarty Version2.4.2
Smarty ≫ Smarty Version2.5.0
Smarty ≫ Smarty Version2.5.0 Updaterc1
Smarty ≫ Smarty Version2.5.0 Updaterc2
Smarty ≫ Smarty Version2.6.0
Smarty ≫ Smarty Version2.6.0 Updaterc1
Smarty ≫ Smarty Version2.6.0 Updaterc2
Smarty ≫ Smarty Version2.6.0 Updaterc3
Smarty ≫ Smarty Version2.6.1
Smarty ≫ Smarty Version2.6.2
Smarty ≫ Smarty Version2.6.3
Smarty ≫ Smarty Version2.6.4
Smarty ≫ Smarty Version2.6.5
Smarty ≫ Smarty Version2.6.6
Smarty ≫ Smarty Version2.6.7
Smarty ≫ Smarty Version2.6.9
Smarty ≫ Smarty Version2.6.10
Smarty ≫ Smarty Version2.6.11
Smarty ≫ Smarty Version2.6.12
Smarty ≫ Smarty Version2.6.13
Smarty ≫ Smarty Version2.6.14
Smarty ≫ Smarty Version2.6.15
Smarty ≫ Smarty Version2.6.16
Smarty ≫ Smarty Version2.6.17
Smarty ≫ Smarty Version2.6.18
Smarty ≫ Smarty Version2.6.20
Smarty ≫ Smarty Version2.6.22
Smarty ≫ Smarty Version2.6.24
Smarty ≫ Smarty Version2.6.25
Smarty ≫ Smarty Version2.6.26
Smarty ≫ Smarty Version3.0.0 Updatebeta4
Smarty ≫ Smarty Version3.0.0 Updatebeta5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.43% 0.598
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.