Smarty

Smarty

35 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2008-4810

  • EPSS 2.19%
  • Veröffentlicht 31.10.2008 18:09:08
  • Zuletzt bearbeitet 16.06.2026 22:58:35

The _expand_quoted_text function in libs/Smarty_Compiler.class.php in Smarty 2.6.20 before r2797 allows remote attackers to execute arbitrary PHP code via vectors related to templates and (1) a dollar-sign character, aka "php executed in templates;" ...

7.5

CVE-2008-1066

  • EPSS 1.95%
  • Veröffentlicht 28.02.2008 20:44:00
  • Zuletzt bearbeitet 16.06.2026 22:50:54

The modifier.regex_replace.php plugin in Smarty before 2.6.19, as used by Serendipity (S9Y) and other products, allows attackers to call arbitrary PHP functions via templates, related to a '\0' character in a search string.

7.5

CVE-2006-7193

Exploit
  • EPSS 1.48%
  • Veröffentlicht 12.04.2007 19:19:00
  • Zuletzt bearbeitet 16.06.2026 22:34:33

PHP remote file inclusion vulnerability in unit_test/test_cases.php in Smarty 2.6.1 allows remote attackers to execute arbitrary PHP code via a URL in the SMARTY_DIR parameter. NOTE: this issue is disputed by CVE and a third party because SMARTY_DIR...

7.5

CVE-2006-7105

Exploit
  • EPSS 1.74%
  • Veröffentlicht 03.03.2007 21:19:00
  • Zuletzt bearbeitet 16.06.2026 22:34:23

PHP remote file inclusion vulnerability in libs/Smarty.class.php in Smarty 2.6.9 allows remote attackers to execute arbitrary PHP code via a URL in the filename parameter. NOTE: in the original disclosure, filename is used in a function definition, ...

7.5

CVE-2005-0913

  • EPSS 1.53%
  • Veröffentlicht 02.05.2005 04:00:00
  • Zuletzt bearbeitet 16.06.2026 22:12:02

Unknown vulnerability in the regex_replace modifier (modifier.regex_replace.php) in Smarty before 2.6.8 allows attackers to execute arbitrary PHP code.