Lucene search
K

PHP Code Injection by malicious block or filename

🗓️ 17 May 2022 12:59:00Reported by OpenJS FoundationType 
friendsofphp
 friendsofphp
🔗 github.com👁 27 Views

PHP Code Injection by choosing malicious block or file names. Sites trusting template authors should upgrade Smarty v3 or v4 asap

Related
Detection
ReporterTitlePublishedViews
Family
GithubExploit
Exploit for Code Injection in Smarty
25 May 202206:02
githubexploit
Circl
CVE-2022-29221
25 May 202206:03
circl
CNNVD
Smarty 代码注入漏洞
17 May 202200:00
cnnvd
CVE
CVE-2022-29221
24 May 202200:00
cve
Cvelist
CVE-2022-29221 PHP Code Injection by malicious block or filename in Smarty
24 May 202200:00
cvelist
Debian
[SECURITY] [DLA 3033-1] smarty3 security update
29 May 202215:01
debian
Debian
[SECURITY] [DSA 5151-1] smarty3 security update
29 May 202214:57
debian
Debian CVE
CVE-2022-29221
24 May 202200:00
debiancve
Tenable Nessus
Debian DLA-3033-1 : smarty3 - LTS security update
31 May 202200:00
nessus
Tenable Nessus
Debian DSA-5151-1 : smarty3 - security update
31 May 202200:00
nessus
Rows per page
Vulners
Node
smartysmartyRange<4.1.1

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 May 2022 12:59Current
8.5High risk
Vulners AI Score8.5
CVSS 26.5
CVSS 3.18.8
EPSS0.25501
SSVC
27