Lucene search
GoogleOSV:DLA-452-1HistoryMay 03, 2016 - 12:00 a.m.
smarty3 - security update
2016-05-0300:00:00
Google
osv.dev
4
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
Smarty3, a template engine for PHP, allowed remote attackers to bypass
the secure mode restrictions and execute arbitrary PHP code as
demonstrated by “{literal}<{/literal}script language=php>” in a
template.
For Debian 7 Wheezy, these problems have been fixed in version
3.1.10-2+deb7u1.
We recommend that you upgrade your smarty3 packages.
References
Related
fedora
fedora
[SECURITY] Fedora 19 Update: php-Smarty-3.1.21-1.fc19
2014-11-05 03:55:27
[SECURITY] Fedora 21 Update: php-Smarty-3.1.21-1.fc21
2014-11-10 06:28:50
[SECURITY] Fedora 20 Update: php-Smarty-3.1.21-1.fc20
2014-11-05 03:57:11
prion
prion
Design/Logic Flaw
2014-11-03 16:55:00
nessus
nessus
Debian DLA-452-1 : smarty3 security update
2016-05-04 00:00:00
Fedora 19 : php-Smarty-3.1.21-1.fc19 (2014-13570)
2014-11-05 00:00:00
Fedora 20 : php-Smarty-3.1.21-1.fc20 (2014-13574)
2014-11-05 00:00:00
osv
osv
Smarty arbitrary PHP code execution
2022-05-17 01:13:38
cvelist
cvelist
CVE-2014-8350
2014-11-03 16:00:00
ubuntucve
ubuntucve
CVE-2014-8350
2014-11-03 00:00:00
debiancve
debiancve
CVE-2014-8350
2014-11-03 16:55:00
github
github
Smarty arbitrary PHP code execution
2022-05-17 01:13:38
openvas
openvas
Fedora Update for php-Smarty FEDORA-2014-13574
2014-11-05 00:00:00
Debian: Security Advisory (DLA-452-1)
2023-03-08 00:00:00
Fedora Update for php-Smarty FEDORA-2014-13570
2014-11-05 00:00:00
debian
debian
[SECURITY] [DLA 452-1] smarty3 security update
2016-05-03 15:38:19
cve
cve
CVE-2014-8350
2014-11-03 16:55:00
mageia
mageia
Updated php-smarty packages fix security vulnerability
2014-11-21 15:44:16
Updated php-smarty packages fix security vulnerabilities
2014-11-21 15:44:16
securityvulns
securityvulns
[ MDVSA-2014:221 ] php-smarty
2014-12-01 00:00:00
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related for OSV:DLA-452-1