Lucene search
Redhat.comRH:CVE-2008-1066HistoryOct 04, 2019 - 9:51 p.m.
CVE-2008-1066
2019-10-0421:51:22
redhat.com
access.redhat.com
2
6.9 Medium
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.017 Low
EPSS
Percentile
87.8%
The modifier.regex_replace.php plugin in Smarty before 2.6.19, as used by Serendipity (S9Y) and other products, allows attackers to call arbitrary PHP functions via templates, related to a ‘\0’ character in a search string.
Related
nessus
nessus
Fedora 8 : php-pear-PhpDocumentor-1.4.1-2.fc8 (2008-2656)
2008-03-28 00:00:00
openSUSE 10 Security Update : moodle (moodle-5109)
2008-03-21 00:00:00
Debian DSA-1520-1 : smarty - insufficient input sanitising
2008-03-17 00:00:00
fedora
fedora
[SECURITY] Fedora 7 Update: gallery2-2.2.4-3.fc7
2008-04-17 03:57:05
[SECURITY] Fedora 8 Update: gallery2-2.2.4-3.fc8
2008-04-17 03:53:35
[SECURITY] Fedora 8 Update: php-pear-PhpDocumentor-1.4.1-2.fc8
2008-03-26 17:10:33
openvas
openvas
Fedora Update for gallery2 FEDORA-2008-2650
2009-02-16 00:00:00
Fedora Update for php-pear-PhpDocumentor FEDORA-2008-2656
2009-02-16 00:00:00
Fedora Update for gallery2 FEDORA-2008-2587
2009-02-16 00:00:00
ubuntucve
ubuntucve
CVE-2008-1066
2008-02-28 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 1520-1] New smarty packages fix arbitrary code execution
2008-03-17 00:00:00
[ GLSA 201111-04 ] phpDocumentor: Function call injection
2011-11-21 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 7 package smarty version 2.6.19-alt1
2008-03-12 00:00:00
Security fix for the ALT Linux 6 package smarty version 2.6.19-alt1
2008-03-12 00:00:00
gentoo
gentoo
phpDocumentor: Function call injection
2011-11-11 00:00:00
Smarty: Multiple vulnerabilities
2010-06-02 00:00:00
cve
cve
CVE-2008-1066
2008-02-28 20:44:00
debian
debian
[SECURITY] [DSA 1520-1] New smarty packages fix arbitrary code execution
2008-03-16 11:37:01
prion
prion
Spoofing
2008-02-28 20:44:00
6.9 Medium
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.017 Low
EPSS
Percentile
87.8%
Related for RH:CVE-2008-1066