Lucene search
+L

PHP Code Injection by malicious block or filename

🗓️ 17 May 2022 12:59:00Reported by OpenJS FoundationType 
friendsofphp
 friendsofphp
🔗 github.com👁 49 Views

PHP Code Injection by choosing malicious block or file names. Sites trusting template authors should upgrade Smarty v3 or v4 asap

Related
Detection
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit
Exploit for Code Injection in Smarty
25 May 202206:02
–githubexploit
bdu_fstec
BDU FSTEC
PHP Smarty Template Handlers Arbitrary PHP Code Execution
29 Jun 202200:00
–bdu_fstec
circl
Circl
CVE-2022-29221
25 May 202206:03
–circl
cnnvd
CNNVD
Smarty code injection vulnerability
17 May 202200:00
–cnnvd
cve
CVE
CVE-2022-29221
24 May 202200:00
–cve
cvelist
Cvelist
CVE-2022-29221 PHP Code Injection by malicious block or filename in Smarty
24 May 202200:00
–cvelist
debian
Debian
[SECURITY] [DLA 3033-1] smarty3 security update
29 May 202215:01
–debian
debian
Debian
[SECURITY] [DSA 5151-1] smarty3 security update
29 May 202214:57
–debian
debiancve
Debian CVE
CVE-2022-29221
24 May 202200:00
–debiancve
nessus
Tenable Nessus
Debian DLA-3033-1 : smarty3 - LTS security update
31 May 202200:00
–nessus
Rows per page
Vulners
Node
smartysmartyRange<4.1.1

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 May 2022 12:59Current
8.5High risk
Vulners AI Score8.5
CVSS 26.5
CVSS 3.18.8
EPSS0.04914
SSVC
49