Lucene search

K
nvd[email protected]NVD:CVE-2010-4727
HistoryFeb 03, 2011 - 5:00 p.m.

CVE-2010-4727

2011-02-0317:00:02
CWE-20
web.nvd.nist.gov

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.4%

Smarty before 3.0.0 beta 7 does not properly handle the <?php and ?> tags, which has unspecified impact and remote attack vectors.

Affected configurations

NVD
Node
smartysmartyRange3.0.0beta6
OR
smartysmartyMatch1.0
OR
smartysmartyMatch1.0a
OR
smartysmartyMatch1.0b
OR
smartysmartyMatch1.1.0
OR
smartysmartyMatch1.2.0
OR
smartysmartyMatch1.2.1
OR
smartysmartyMatch1.2.2
OR
smartysmartyMatch1.3.0
OR
smartysmartyMatch1.3.1
OR
smartysmartyMatch1.3.2
OR
smartysmartyMatch1.4.0
OR
smartysmartyMatch1.4.0b1
OR
smartysmartyMatch1.4.0b2
OR
smartysmartyMatch1.4.1
OR
smartysmartyMatch1.4.2
OR
smartysmartyMatch1.4.3
OR
smartysmartyMatch1.4.4
OR
smartysmartyMatch1.4.5
OR
smartysmartyMatch1.4.6
OR
smartysmartyMatch1.5.0
OR
smartysmartyMatch1.5.1
OR
smartysmartyMatch1.5.2
OR
smartysmartyMatch2.0.0
OR
smartysmartyMatch2.0.1
OR
smartysmartyMatch2.1.0
OR
smartysmartyMatch2.1.1
OR
smartysmartyMatch2.2.0
OR
smartysmartyMatch2.3.0
OR
smartysmartyMatch2.3.1
OR
smartysmartyMatch2.4.0
OR
smartysmartyMatch2.4.1
OR
smartysmartyMatch2.4.2
OR
smartysmartyMatch2.5.0
OR
smartysmartyMatch2.5.0rc1
OR
smartysmartyMatch2.5.0rc2
OR
smartysmartyMatch2.6.0
OR
smartysmartyMatch2.6.0rc1
OR
smartysmartyMatch2.6.0rc2
OR
smartysmartyMatch2.6.0rc3
OR
smartysmartyMatch2.6.1
OR
smartysmartyMatch2.6.2
OR
smartysmartyMatch2.6.3
OR
smartysmartyMatch2.6.4
OR
smartysmartyMatch2.6.5
OR
smartysmartyMatch2.6.6
OR
smartysmartyMatch2.6.7
OR
smartysmartyMatch2.6.9
OR
smartysmartyMatch2.6.10
OR
smartysmartyMatch2.6.11
OR
smartysmartyMatch2.6.12
OR
smartysmartyMatch2.6.13
OR
smartysmartyMatch2.6.14
OR
smartysmartyMatch2.6.15
OR
smartysmartyMatch2.6.16
OR
smartysmartyMatch2.6.17
OR
smartysmartyMatch2.6.18
OR
smartysmartyMatch2.6.20
OR
smartysmartyMatch2.6.22
OR
smartysmartyMatch2.6.24
OR
smartysmartyMatch2.6.25
OR
smartysmartyMatch2.6.26
OR
smartysmartyMatch3.0.0beta4
OR
smartysmartyMatch3.0.0beta5

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.4%

Related for NVD:CVE-2010-4727