Gentoo Linux Security Advisory 201111-4 - phpDocumentor bundles Smarty which contains an input sanitation flaw, allowing attackers to call arbitrary PHP functions. Versions less than 1.4.3-r1 are affected.
15090de5826324024b831e63a61e6a4e9ad35fcdd8b96ed6d93a9d44c2882f40Gentoo Linux Security Advisory 201006-13 - Multiple vulnerabilities in the Smarty template engine might allow remote attackers to execute arbitrary PHP code. Versions less than 2.6.23 are affected.
0f96060e48a38b2da707c8d1b4e248c7349ea838ebce02cad25d161a76115684Debian Security Advisory 1520-1 - It was discovered that the regex module in Smarty, a PHP templating engine, allows attackers to call arbitrary PHP functions via templates using the regex_replace plugin by a specially crafted search string.
3b96c9c75d168cb1dab3f2e26096921aa454050b3ea5aaa6a645a8a2e6a1d152
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed