CVE-2025-46661

IPW Systems Metazo through 8.1.3 allows unauthenticated Remote Code Execution because smartyValidator.php enables the attacker to provide template expressions, aka Server-Side Template-Injection. All instances have been patched by the Supplier...

CVE-2025-46661

creationtimestamp| type| source ---|---|--- 2025-04-28 13:40:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnuvd7x4ke2a 2025-04-28 14:10:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13682 2025-04-28 15:48:50+00:00| seen|...

CVE-2025-46661

IPW Systems Metazo through 8.1.3 allows unauthenticated Remote Code Execution because smartyValidator.php enables the attacker to provide template expressions, aka Server-Side Template-Injection. All instances have been patched by the Supplier...

CVE-2025-46661

IPW Systems Metazo through 8.1.3 allows unauthenticated Remote Code Execution because smartyValidator.php enables the attacker to provide template expressions, aka Server-Side Template-Injection. All instances have been patched by the Supplier...

CVE-2025-46661

IPW Systems Metazo through 8.1.3 allows unauthenticated Remote Code Execution because smartyValidator.php enables the attacker to provide template expressions, aka Server-Side Template-Injection. All instances have been patched by the Supplier...

CVE-2025-46661

IPW Systems Metazo up to version 8.1.3 is affected by unauthenticated Remote Code Execution via Server-Side Template-Injection through smartyValidator.php. The issue affects versions 8.1.3 and earlier; all instances have been patched by the supplier. CVSS metrics shown in sources indicate a criti...