SM
Product
Smarty
31
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 5Medium 4Low 0
Watch
Add Smarty to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-26120 | 9.8 | Feb 22 | Smarty before 3.1.39 allows code injection via an unexpected function name after a {function name= substring Affected: before 3.1.39 |
| CVE-2011-1028 | 9.8 | Nov 20 | The $smarty.template variable in Smarty3 allows attackers to possibly execute arbitrary PHP code via the sysplugins/smarty_internal_compile_private_special_variable.php file Affected: 3.0.0 before 3.0.7 |
| CVE-2017-1000480 | 9.8 | Jan 3 | Smarty 3 before 3.1.32 is vulnerable to a PHP code injection when calling fetch() or display() functions on custom resources that does not sanitize template name Affected: 3.0.0 before 3.1.32 |
| CVE-2006-7105 | 9.8 | Mar 3 | PHP remote file inclusion vulnerability in libs/Smarty.class.php in Smarty 2.6.9 allows remote attackers to execute arbitrary PHP code via a URL in the filename parameter Affected: 2.6.9 |
| CVE-2022-29221 | 8.8 | May 24 | Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic Affected: before 3.1.45; 4.0.0 before 4.1.1 |
| CVE-2021-29454 | 8.8 | Jan 10 | Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic Affected: before 3.1.42; 4.0.0 before 4.0.2 |
| CVE-2021-21408 | 8.8 | Jan 10 | Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic Affected: before 3.1.43; 4.0.0 before 4.0.3 |
| CVE-2021-26119 | 7.5 | Feb 22 | Smarty before 3.1.39 allows a Sandbox Escape because $smarty.template_object can be accessed in sandbox mode Affected: before 3.1.39 |
| CVE-2018-13982 | 7.5 | Sep 18 | Smarty_Security::isTrustedResourceDir() in Smarty before 3.1.33 is prone to a path traversal vulnerability due to insufficient template code sanitization Affected: before 3.1.33 |
| CVE-2023-28447 | 6.1 | Mar 28 | Smarty is a template engine for PHP Affected: before 3.1.48; 4.0.0 before 4.3.1 |
| CVE-2018-16831 | 5.9 | Sep 11 | Smarty before 3.1.33-dev-4 allows attackers to bypass the trusted_dir protection mechanism via a file:./../ substring in an include statement Affected: 3.0.0 through 3.1.32 |
| CVE-2018-25047 | 5.4 | Sep 15 | In Smarty before 3.1.47 and 4.x before 4.2.1, libs/plugins/function.mailto.php allows XSS Affected: before 3.1.47; 4.0.0 before 4.2.1 |
| CVE-2023-41661 | 4.8 | Sep 29 | WordPress Smarty for WordPress Plugin <= 3.1.35 is vulnerable to Cross Site Scripting (XSS) Affected: through 3.1.35 |
| CVE-2014-8350 | – | Nov 3 | Smarty before 3.1.21 allows remote attackers to bypass the secure mode restrictions and execute arbitrary PHP code as demonstrated by "{literal}<{/literal}script language=php>" in… Affected: through 3.1.20; 1.0; 1.0a; 1.0b; 1.1.0; 1.2.0; +34 more |
| CVE-2012-4437 | – | Oct 1 | Cross-site scripting (XSS) vulnerability in the SmartyException class in Smarty (aka smarty-php) before 3.1.12 allows remote attackers to inject arbitrary web script or HTML via… Affected: 1.0; 1.0a; 1.0b; 1.1.0; 1.2.0; 1.2.1; +34 more |
| CVE-2012-4277 | – | Aug 13 | Cross-site scripting (XSS) vulnerability in the smarty_function_html_options_optoutput function in distribution/libs/plugins/function.html_options.php in Smarty before 3.1.8… Affected: through 3.1.7; 1.0; 1.0a; 1.0b; 1.1.0; 1.2.0; +34 more |
| CVE-2010-4727 | – | Feb 3 | Smarty before 3.0.0 beta 7 does not properly handle the <?php and ?> tags, which has unspecified impact and remote attack vectors Affected: through 3.0.0; 1.0; 1.0a; 1.0b; 1.1.0; 1.2.0; +34 more |
| CVE-2009-5052 | – | Feb 3 | Multiple unspecified vulnerabilities in Smarty before 3.0.0 beta 6 have unknown impact and attack vectors Affected: through 3.0.0; 1.0; 1.0a; 1.0b; 1.1.0; 1.2.0; +34 more |
| CVE-2009-5053 | – | Feb 3 | Unspecified vulnerability in Smarty before 3.0.0 beta 6 allows remote attackers to execute arbitrary PHP code by injecting this code into a cache file Affected: through 3.0.0; 1.0; 1.0a; 1.0b; 1.1.0; 1.2.0; +34 more |
| CVE-2009-5054 | – | Feb 3 | Smarty before 3.0.0 beta 4 does not consider the umask value when setting the permissions of files, which might allow attackers to bypass intended access restrictions via standard… Affected: through 2.6.26; 1.0; 1.0a; 1.0b; 1.1.0; 1.2.0; +34 more |
| CVE-2010-4722 | – | Feb 3 | Unspecified vulnerability in the fetch plugin in Smarty before 3.0.2 has unknown impact and remote attack vectors Affected: through 3.0.1; 1.0; 1.0a; 1.0b; 1.1.0; 1.2.0; +34 more |
| CVE-2010-4723 | – | Feb 3 | Smarty before 3.0.0, when security is enabled, does not prevent access to the (1) dynamic and (2) private object members of an assigned object, which has unspecified impact and… Affected: through 3.0.0; 1.0; 1.0a; 1.0b; 1.1.0; 1.2.0; +34 more |
| CVE-2010-4724 | – | Feb 3 | Multiple unspecified vulnerabilities in the parser implementation in Smarty before 3.0.0 RC3 have unknown impact and remote attack vectors Affected: through 3.0.0; 1.0; 1.0a; 1.0b; 1.1.0; 1.2.0; +34 more |
| CVE-2010-4725 | – | Feb 3 | Smarty before 3.0.0 RC3 does not properly handle an on value of the asp_tags option in the php.ini file, which has unspecified impact and remote attack vectors Affected: through 3.0.0; 1.0; 1.0a; 1.0b; 1.1.0; 1.2.0; +34 more |
| CVE-2010-4726 | – | Feb 3 | Unspecified vulnerability in the math plugin in Smarty before 3.0.0 RC1 has unknown impact and remote attack vectors Affected: through 3.0.0; 1.0; 1.0a; 1.0b; 1.1.0; 1.2.0; +34 more |
| CVE-2009-1669 | – | May 18 | The smarty_function_math function in libs/plugins/function.math.php in Smarty 2.6.22 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in… Affected: 2.6.22 |
| CVE-2008-4811 | – | Oct 31 | The _expand_quoted_text function in libs/Smarty_Compiler.class.php in Smarty 2.6.20 r2797 and earlier allows remote attackers to execute arbitrary PHP code via vectors related to… Affected: 1.0; 1.0a; 1.0b; 1.1.0; 1.2.0; 1.2.1; +34 more |
| CVE-2008-4810 | – | Oct 31 | The _expand_quoted_text function in libs/Smarty_Compiler.class.php in Smarty 2.6.20 before r2797 allows remote attackers to execute arbitrary PHP code via vectors related to… Affected: 1.0; 1.0a; 1.0b; 1.1.0; 1.2.0; 1.2.1; +34 more |
| CVE-2008-1066 | – | Feb 28 | The modifier.regex_replace.php plugin in Smarty before 2.6.19, as used by Serendipity (S9Y) and other products, allows attackers to call arbitrary PHP functions via templates,… Affected: through 2.6.18 |
| CVE-2006-7193 | – | Apr 12 | PHP remote file inclusion vulnerability in unit_test/test_cases.php in Smarty 2.6.1 allows remote attackers to execute arbitrary PHP code via a URL in the SMARTY_DIR parameter Affected: 2.6.1 |
| CVE-2005-0913 | – | May 2 | Unknown vulnerability in the regex_replace modifier (modifier.regex_replace.php) in Smarty before 2.6.8 allows attackers to execute arbitrary PHP code Affected: 2.6.2; 2.6.3; 2.6.4; 2.6.5; 2.6.6; 2.6.7 |
Showing 31