741 matches found
[SECURITY] Fedora 8 Update: php-Smarty-2.6.20-1.fc8
Although Smarty is known as a "Template Engine", it would be more accurately described as a "Template/Presentation Framework." That is, it provides the programmer and template designer with a wealth of tools to automate tasks commonly dealt with at the presentation layer of an application. I stre...
[SECURITY] Fedora 9 Update: php-Smarty-2.6.20-1.fc9
Although Smarty is known as a "Template Engine", it would be more accurately described as a "Template/Presentation Framework." That is, it provides the programmer and template designer with a wealth of tools to automate tasks commonly dealt with at the presentation layer of an application. I stre...
Gentoo Security Advisory GLSA 200503-35 (smarty)
The remote host is missing updates announced in advisory GLSA 200503-35. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200503-35 (smarty)
The remote host is missing updates announced in advisory GLSA 200503-35. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Pligg CMS 9.9.0 - Cross-Site Scripting Local File Inclusion SQL Injection
Pligg CMS 9.9.0 - Cross-Site Scripting Local File Inclusion SQL Injection GulfTech Security Research July 30, 2008 Vendor : Pligg LLC URL : http://www.pligg.com/ Version : Pligg alertdocument.cookie; The above example link would display the end users cookie to them. Of course this can also be use...
Fedora 8 : gallery2-2.2.5-1.fc8 (2008-5479)
Wed Jun 18 2008 John Berninger - 2.2.5-1 - update to upstream 2.2.5 for security vulns - Thu Mar 20 2008 John Berninger - 2.2.4-3 - revert to SVN snapshot so that config-time integrity checks don't fail - remove embedded copy of smarty and use php-Smarty package - Sat Dec 29 2007 John Berninger...
Fedora 8 : gallery2-2.2.4-3.fc8 (2008-2650)
Thu Mar 20 2008 John Berninger - 2.2.4-3 - revert to SVN snapshot so that config-time integrity checks don't fail - remove embedded copy of smarty and use php-Smarty package - Sat Dec 29 2007 John Berninger 2.2.4-1 - A christmas present -- critical security update to 2.2.4 Note that Tenable...
Fedora 7 : gallery2-2.2.4-3.fc7 (2008-2587)
Thu Mar 20 2008 John Berninger - 2.2.4-3 - revert to SVN snapshot so that config-time integrity checks don't fail - remove embedded copy of smarty and use php-Smarty package - Sat Dec 29 2007 John Berninger 2.2.4-1 - A christmas present -- critical security update to 2.2.4 - Fri Aug 31 2007 John...
Debian: Security Advisory (DSA-1520-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 1520-1 (smarty)
The remote host is missing an update to smarty announced via advisory DSA 1520-1. OpenVAS Vulnerability Test $Id: deb15201.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1520-1 smarty Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Debian DSA-1520-1 : smarty - insufficient input sanitising
It was discovered that the regex module in Smarty, a PHP templating engine, allows attackers to call arbitrary PHP functions via templates using the regexreplace plugin by a specially crafted search string. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...
[SECURITY] [DSA 1520-1] New smarty packages fix arbitrary code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1520-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst March 16, 2008 http://www.debian.org/security/faq -...
DSA-1520-1 smarty - arbitrary code execution
Bulletin has no description...
Security fix for the ALT Linux 7 package smarty version 2.6.19-alt1
March 12, 2008 Vladimir V Kamarzin 2.6.19-alt1 - 2.6.19. Security fixes: + CVE-2008-1066 Smarty "regexreplace" Modifier Template Security Bypass...
Security fix for the ALT Linux 6 package smarty version 2.6.19-alt1
March 12, 2008 Vladimir V Kamarzin 2.6.19-alt1 - 2.6.19. Security fixes: + CVE-2008-1066 Smarty "regexreplace" Modifier Template Security Bypass...
Barryvan Compo Manager 0.5pre-1 Remote File Inclusion Vulnerability
No description provided by source. --==+================================================================================+==-- --==+ barryvancompo-0.3 Remote File Inclusion +==-- --==+================================================================================+==-- Author: MhZ91 Title:...
CVE-2008-1066
The modifier.regexreplace.php plugin in Smarty before 2.6.19, as used by Serendipity S9Y and other products, allows attackers to call arbitrary PHP functions via templates, related to a '\0' character in a search string...
Spoofing
The modifier.regexreplace.php plugin in Smarty before 2.6.19, as used by Serendipity S9Y and other products, allows attackers to call arbitrary PHP functions via templates, related to a '\0' character in a search string...
CVE-2008-1066
The modifier.regexreplace.php plugin in Smarty before 2.6.19, as used by Serendipity S9Y and other products, allows attackers to call arbitrary PHP functions via templates, related to a '\0' character in a search string...
CVE-2008-1066
The modifier.regexreplace.php plugin in Smarty before 2.6.19, as used by Serendipity S9Y and other products, allows attackers to call arbitrary PHP functions via templates, related to a '\0' character in a search string...