Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

smarty smarty 1.0b vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2010-4724
Multiple unspecified vulnerabilities in the parser implementation in Smarty prior to 3.0.0 RC3 have unknown impact and remote attack vectors.
Smarty Smarty 2.6.1Smarty Smarty 2.6.17Smarty Smarty 2.6.6Smarty Smarty 2.6.16Smarty Smarty 2.6.0Smarty Smarty 2.6.20Smarty Smarty 2.1.1Smarty Smarty 1.5.0Smarty Smarty 2.2.0Smarty Smarty 2.3.1Smarty Smarty 1.4.2Smarty Smarty 1.4.4Smarty Smarty 1.3.0Smarty Smarty 1.3.2Smarty Smarty 2.6.26Smarty Smarty 3.0.0Smarty SmartySmarty Smarty 2.6.2Smarty Smarty 2.6.7Smarty Smarty 2.6.9Smarty Smarty 2.6.3Smarty Smarty 2.6.4
10
CVSSv2
CVE-2010-4726
Unspecified vulnerability in the math plugin in Smarty prior to 3.0.0 RC1 has unknown impact and remote attack vectors. NOTE: this might overlap CVE-2009-1669.
Smarty Smarty 2.6.1Smarty Smarty 2.6.17Smarty Smarty 2.6.6Smarty Smarty 2.6.16Smarty Smarty 2.6.0Smarty Smarty 2.6.20Smarty Smarty 2.1.1Smarty Smarty 1.5.0Smarty Smarty 2.2.0Smarty Smarty 2.3.1Smarty Smarty 1.4.2Smarty Smarty 1.4.4Smarty Smarty 1.3.0Smarty Smarty 1.3.2Smarty Smarty 2.6.26Smarty Smarty 3.0.0Smarty Smarty 2.6.13Smarty Smarty 2.6.14Smarty Smarty 2.5.0Smarty Smarty 1.5.1Smarty Smarty 1.5.2Smarty Smarty 2.4.1
10
CVSSv2
CVE-2009-5052
Multiple unspecified vulnerabilities in Smarty prior to 3.0.0 beta 6 have unknown impact and attack vectors.
Smarty Smarty 2.6.22Smarty Smarty 2.6.10Smarty Smarty 2.6.3Smarty Smarty 2.6.5Smarty Smarty 2.5.0Smarty Smarty 2.6.0Smarty Smarty 2.1.0Smarty Smarty 1.4.6Smarty Smarty 2.4.2Smarty Smarty 2.3.0Smarty Smarty 2.6.18Smarty Smarty 1.4.3Smarty Smarty 1.2.2Smarty Smarty 1.3.1Smarty Smarty 1.2.1Smarty Smarty 2.6.25Smarty Smarty 3.0.0Smarty Smarty 2.6.17Smarty Smarty 2.6.2Smarty Smarty 2.6.7Smarty Smarty 2.6.9Smarty Smarty 2.6.11
9.3
CVSSv2
CVE-2010-4723
Smarty prior to 3.0.0, when security is enabled, does not prevent access to the (1) dynamic and (2) private object members of an assigned object, which has unspecified impact and remote attack vectors.
Smarty Smarty 2.6.1Smarty Smarty 2.6.17Smarty Smarty 2.6.6Smarty Smarty 2.6.16Smarty Smarty 2.6.20Smarty Smarty 2.6.12Smarty Smarty 2.1.1Smarty Smarty 1.5.0Smarty Smarty 2.2.0Smarty Smarty 2.3.1Smarty Smarty 1.4.4Smarty Smarty 1.4.0Smarty Smarty 1.3.0Smarty Smarty 1.3.2Smarty Smarty 2.6.26Smarty Smarty 3.0.0Smarty SmartySmarty Smarty 2.6.7Smarty Smarty 2.6.9Smarty Smarty 2.6.3Smarty Smarty 2.6.4Smarty Smarty 2.6.0
10
CVSSv2
CVE-2010-4725
Smarty prior to 3.0.0 RC3 does not properly handle an on value of the asp_tags option in the php.ini file, which has unspecified impact and remote attack vectors.
Smarty Smarty 2.6.2Smarty Smarty 2.6.9Smarty Smarty 2.6.17Smarty Smarty 2.6.7Smarty Smarty 2.6.16Smarty Smarty 2.6.14Smarty Smarty 2.6.12Smarty Smarty 2.0.0Smarty Smarty 1.5.0Smarty Smarty 1.5.2Smarty Smarty 2.3.1Smarty Smarty 1.0aSmarty Smarty 1.4.0Smarty Smarty 1.3.2Smarty Smarty 1.1.0Smarty Smarty 3.0.0Smarty Smarty 2.6.15Smarty Smarty 2.6.13Smarty Smarty 2.6.0Smarty Smarty 2.6.11Smarty Smarty 1.5.1Smarty Smarty 2.4.1
10
CVSSv2
CVE-2010-4727
Smarty prior to 3.0.0 beta 7 does not properly handle the <?php and ?> tags, which has unspecified impact and remote attack vectors.
Smarty Smarty 2.6.22Smarty Smarty 2.6.10Smarty Smarty 2.6.3Smarty Smarty 2.6.5Smarty Smarty 2.5.0Smarty Smarty 2.6.0Smarty Smarty 2.0.0Smarty Smarty 2.1.0Smarty Smarty 1.4.6Smarty Smarty 2.4.2Smarty Smarty 2.6.18Smarty Smarty 1.4.3Smarty Smarty 1.2.2Smarty Smarty 1.3.1Smarty Smarty 1.2.1Smarty Smarty 2.6.25Smarty Smarty 2.6.17Smarty Smarty 2.6.15Smarty Smarty 2.6.16Smarty Smarty 2.6.13Smarty Smarty 2.6.14Smarty Smarty 1.5.0
7.5
CVSSv2
CVE-2009-5053
Unspecified vulnerability in Smarty prior to 3.0.0 beta 6 allows remote malicious users to execute arbitrary PHP code by injecting this code into a cache file.
Smarty Smarty 2.6.7Smarty Smarty 2.6.9Smarty Smarty 2.6.3Smarty Smarty 2.6.4Smarty Smarty 2.6.0Smarty Smarty 2.0.0Smarty Smarty 2.6.10Smarty Smarty 2.6.2Smarty Smarty 2.6.5Smarty Smarty 2.6.15Smarty Smarty 2.6.11Smarty Smarty 1.4.6Smarty Smarty 1.5.1Smarty Smarty 2.5.0Smarty Smarty 2.3.0Smarty Smarty 2.4.0Smarty Smarty 1.4.3Smarty Smarty 1.4.5Smarty Smarty 1.3.1Smarty Smarty 1.0bSmarty Smarty 2.6.25Smarty Smarty 3.0.0
10
CVSSv2
CVE-2010-4722
Unspecified vulnerability in the fetch plugin in Smarty prior to 3.0.2 has unknown impact and remote attack vectors.
Smarty Smarty 2.6.22Smarty Smarty 2.6.7Smarty Smarty 2.6.3Smarty Smarty 2.6.14Smarty Smarty 2.5.0Smarty Smarty 2.0.0Smarty Smarty 2.1.0Smarty Smarty 1.5.2Smarty Smarty 2.4.2Smarty Smarty 1.0aSmarty Smarty 2.6.18Smarty Smarty 1.4.0Smarty Smarty 1.2.2Smarty Smarty 1.1.0Smarty Smarty 1.2.1Smarty Smarty 3.0.0Smarty Smarty 2.6.1Smarty Smarty 2.6.10Smarty Smarty 2.6.17Smarty Smarty 2.6.2Smarty Smarty 2.6.0Smarty Smarty 2.6.20
7.5
CVSSv2
CVE-2008-4810
The _expand_quoted_text function in libs/Smarty_Compiler.class.php in Smarty 2.6.20 before r2797 allows remote malicious users to execute arbitrary PHP code via vectors related to templates and (1) a dollar-sign character, aka "php executed in templates;" and (2) a doub...
Smarty Smarty 2.6.0Smarty Smarty 2.4.0Smarty Smarty 2.3.1Smarty Smarty 1.5.1Smarty Smarty 1.5.0Smarty Smarty 1.4.0Smarty Smarty 1.2.0Smarty Smarty 1.1.0Smarty Smarty 1.0bSmarty Smarty 2.6.7Smarty Smarty 2.6.9Smarty Smarty 2.6.11Smarty Smarty 2.6.12Smarty Smarty 2.5.0Smarty Smarty 2.3.0Smarty Smarty 2.2.0Smarty Smarty 2.1.1Smarty Smarty 1.4.6Smarty Smarty 1.4.5Smarty Smarty 1.3.2Smarty Smarty 1.0aSmarty Smarty 1.0
7.5
CVSSv2
CVE-2008-4811
The _expand_quoted_text function in libs/Smarty_Compiler.class.php in Smarty 2.6.20 r2797 and previous versions allows remote malicious users to execute arbitrary PHP code via vectors related to templates and a \ (backslash) before a dollar-sign character.
Smarty Smarty 2.6.14Smarty Smarty 2.6.15Smarty Smarty 2.6.16Smarty Smarty 2.4.2Smarty Smarty 2.4.1Smarty Smarty 2.0.1Smarty Smarty 2.0.0Smarty Smarty 1.4.3Smarty Smarty 1.4.2Smarty Smarty 1.4.1Smarty Smarty 1.2.2Smarty Smarty 1.2.1Smarty Smarty 2.6.10Smarty Smarty 2.6.17Smarty Smarty 2.6.6Smarty Smarty 2.6.0Smarty Smarty 2.4.0Smarty Smarty 2.3.1Smarty Smarty 1.5.2Smarty Smarty 1.5.1Smarty Smarty 1.4.0Smarty Smarty 1.2.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook