Sensio Labs Twig Path Traversal Vulnerability

Sensio Labs Twig is a PHP templating engine from Sensio Labs, France, which supports custom tags and filters and creates DSLs. A path traversal vulnerability exists in Sensio Labs Twig 1.0.0 and later, versions prior to 1.44.7, 2.0.0 and later, versions prior to 2.15.3, and 3.0.0 and later,...

Twig remote code execution in templates

The displayBlock function Template.php in Sensio Labs Twig before 1.20.0, when Sandbox mode is enabled, allows remote attackers to execute arbitrary code via the self variable in a template...

Sensio Labs Twig 代码代码注入漏洞

Sensio Labs Twig is a PHP template engine from the French company Sensio Labs that supports custom tags and filters and the creation of DSLs. Sensio Labs Twig is vulnerable to injection, which can be exploited by attackers to run arbitrary PHP functions...

Sensio Labs Twig Information Disclosure Vulnerability

Sensio Labs Twig is a PHP templating engine from Sensio Labs, France, which supports custom tags and filters and creates DSLs. A security vulnerability exists in the sandbox in Sensio Labs Twig versions prior to 1.38.0 and 2.x versions prior to 2.7.0. The vulnerability can be exploited by an...

Sensio Labs Twig displayBlock Arbitrary Code Execution Vulnerability

Sensio Labs Twig is a PHP templating engine from the French company Sensio Labs that allows developers to customize tags and filters and create DSLs. An arbitrary code execution vulnerability exists in versions of Sensio Labs Twig prior to 1.20.0, which allows remote attackers to execute arbitrar...

CVE-2015-7809

The displayBlock function Template.php in Sensio Labs Twig before 1.20.0, when Sandbox mode is enabled, allows remote attackers to execute arbitrary code via the self variable in a template...

Code injection

The displayBlock function Template.php in Sensio Labs Twig before 1.20.0, when Sandbox mode is enabled, allows remote attackers to execute arbitrary code via the self variable in a template...

CVE-2015-7809

The displayBlock function Template.php in Sensio Labs Twig before 1.20.0, when Sandbox mode is enabled, allows remote attackers to execute arbitrary code via the self variable in a template...

CVE-2015-7809

The displayBlock function Template.php in Sensio Labs Twig before 1.20.0, when Sandbox mode is enabled, allows remote attackers to execute arbitrary code via the self variable in a template...

CVE-2015-7809

Removed by vendor...

CVE-2015-7809

CVE-2015-7809 affects the Twig templating engine (Sensio Labs Twig) prior to version 1.20.0. When Sandbox mode is enabled, the displayBlock function in Template.php allows remote code execution via the _self variable in templates. Several connected advisories confirm the issue as a remote code ex...

CVE-2015-7809: Undefined Security Weakness

The displayBlock function Template.php in Sensio Labs Twig before 1.20.0, when Sandbox mode is enabled, allows remote attackers to execute arbitrary code via the self variable in a template...

Sensio Labs Twig Templates Remote Code Execution Vulnerability

Sensio Labs Twig is a PHP template engine that allows developers to customize tags and filters and create DSLs. A remote input validation vulnerability exists in Sensio Labs Twig, which allows remote attackers to exploit the vulnerability to submit a special request to execute arbitrary code...

PT-2015-7622

Name of the Vulnerable Software and Affected Versions Sensio Labs Twig versions prior to 1.20.0 Description The issue allows remote attackers to execute arbitrary code via the self variable in a template when Sandbox mode is enabled. This is related to the displayBlock function in Template.php...