68 matches found
CVE-2011-1028
The $smarty.template variable in Smarty3 allows attackers to possibly execute arbitrary PHP code via the sysplugins/smartyinternalcompileprivatespecialvariable.php file...
CVE-2011-1028
The $smarty.template variable in Smarty3 allows attackers to possibly execute arbitrary PHP code via the sysplugins/smartyinternalcompileprivatespecialvariable.php file...
DEBIAN-CVE-2011-1028
The $smarty.template variable in Smarty3 allows attackers to possibly execute arbitrary PHP code via the sysplugins/smartyinternalcompileprivatespecialvariable.php file...
Code injection
The $smarty.template variable in Smarty3 allows attackers to possibly execute arbitrary PHP code via the sysplugins/smartyinternalcompileprivatespecialvariable.php file...
CVE-2011-1028
The $smarty.template variable in Smarty3 allows attackers to possibly execute arbitrary PHP code via the sysplugins/smartyinternalcompileprivatespecialvariable.php file...
CVE-2011-1028
The documents collectively describe a vulnerability in Smarty3 involving the $smarty.template variable, which can allow attackers to potentially execute arbitrary PHP code via the sysplugins/smarty_internal_compile_private_special_variable.php file. Core details across sources confirm this is a P...
CVE-2011-1028
The $smarty.template variable in Smarty3 allows attackers to possibly execute arbitrary PHP code via the sysplugins/smartyinternalcompileprivatespecialvariable.php file...
CVE-2011-1028
The $smarty.template variable in Smarty3 allows attackers to possibly execute arbitrary PHP code via the sysplugins/smartyinternalcompileprivatespecialvariable.php file...
openSUSE Security Update : php5-smarty3 (openSUSE-2018-1052)
This update for php5-smarty3 fixes the following issues : - CVE-2018-16381: Prevent traversal vulnerability due to insufficient template code sanitization that allowed attackers controlling the executed template code to bypass the trusted directory security restriction and read arbitrary files...
openSUSE: Security Advisory for php5-smarty3 (openSUSE-SU-2018:2859-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Security update for php5-smarty3 (moderate)
This update for php5-smarty3 fixes the following issues: - CVE-2018-16381: Prevent traversal vulnerability due to insufficient template code sanitization that allowed attackers controlling the executed template code to bypass the trusted directory security restriction and read arbitrary files...
[SECURITY] [DLA 1249-2] smarty3 regression update
Package : smarty3 Version : 3.1.10-2+deb7u3 CVE ID : CVE-2017-1000480 Debian Bug : 886460 It was previously discovered that there was a code-injection vulnerability in smarty3, a PHP template engine. A via specially-crafted filename in comments could result in arbitrary code execution. However, t...
DLA-1249-2 smarty3 - regression update
Bulletin has no description...
[SECURITY] [DSA 4094-2] smarty3 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4094-2 [email protected] https://www.debian.org/security/ January 30, 2018 https://www.debian.org/security/faq - -------------------------------------------------------------------------...
[SECURITY] [DSA 4094-2] smarty3 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4094-2 [email protected] https://www.debian.org/security/ January 30, 2018 https://www.debian.org/security/faq - -------------------------------------------------------------------------...
DSA-4094-2 smarty3 - regression update
Bulletin has no description...
Debian DSA-4094-1 : smarty3 - security update
It was discovered that Smarty, a PHP template engine, was vulnerable to code-injection attacks. An attacker was able to craft a filename in comments that could lead to arbitrary code execution on the host running Smarty. C Tenable Network Security, Inc. The descriptive text and package checks in...
[SECURITY] [DSA 4094-1] smarty3 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4094-1 [email protected] https://www.debian.org/security/ January 22, 2018 https://www.debian.org/security/faq - -------------------------------------------------------------------------...
Debian DLA-1249-2 : smarty3 regression update
It was previously discovered that there was a code-injection vulnerability in smarty3, a PHP template engine. A via specially crafted filename in comments could result in arbitrary code execution. However, the fix in 3.1.10-2+deb7u2 was incorrect. For Debian 7 'Wheezy', this regression has been...