760 matches found
CVE-2021-26121
CS-Cart templates.manage 서버 측 템플릿 인젝션 원격 코드 실행 취약점 발견자: Steven Seeley 360 Vulcan Team 버전: = 4.12.x 최신 날짜: 2021-01-08 12:49 CVE: CVE-2021-26121 공개 타임라인 2021-01-26 – CSCart 개발팀에 전송됨 2021-01-27 – CSCart 개발팀으로부터 접수 확인 통보 2021-02-10 – CSCart로부터 보안 버그가 아니라는 답변 2021-02-12 – 공개 공개 요약 상점 관리자루트 관리자와 구별됨는 템...
lblfixer_cve_2023_28447
LabelGrup Networks, 공식 PrestaShop 파트너 PrestaShop 1.7.X를 위한 모듈로 CVE-2023-28447 취약점 Smarty JavaScript XSS을 수정합니다. 자세한 정보는 다음 링크를 확인하세요: CVE: https://nvd.nist.gov/vuln/detail/CVE-2023-28447 GitHub: https://github.com/smarty-php/smarty/security/advisories/GHSA-7j98-h7fp-4vwj 지침: 1. 이 저장소에서 최신 릴리스를...
CVE-2023-43352-CMSmadesimple-SSTI--Content
CMSmadesimple SSTI v2.2.18 著者: Sergio 説明: CMSmadesimple v.2.2.18 の Server Side Template Injection SSTI 脆弱性により、ローカル攻撃者がネイティブテンプレート構文を使用して悪意のあるペイロードをテンプレートに注入し、それがサーバー側で実行される可能性があります。 攻撃ベクトル: 「コンテンツ - コンテンツマネージャーメニュー」のコンテンツ入力のサニタイズ処理における SSTI 脆弱性により、ユーザーが Web...
tplmap
Tplmap This project is no longer maintained. I'm happy to merge new PRs as long they don't break the test suite. Tplmap assists the exploitation of Code Injection and Server-Side Template Injection vulnerabilities with a number of sandbox escape techniques to get access to the underlying operatin...
CVE-2026-20217
ZendTo 6.15-8 / ClamAV 正確プロファイル RCE と root 変種の再現 このディレクトリは、アカウント不要の ZendTo→ClamAV コード実行チェーンと、その別系統のデフォルトプロファイル Smarty/root-cron 継続に対する、スタンドアロンかつ認可済みラボ向けの再現バンドルです。含まれるもの: 実行可能な PoC 依存関係クロージャ一式 Docker ターゲットトポロジ構築用のスクリプトと来歴情報 試験済み systemd/socket ライフサイクルに一致する Docker Compose 定義...
CVE-2026-999999
X-Trading Portal: 지역 금융 인프라 v1.4.2 개요 이 저장소는 X-Trading Portal XTP의 핵심 배포 및 구성 설정을 포함합니다. XTP는 소매 은행 및 주식 거래 서비스를 위해 설계된 컨테이너화된 솔루션입니다. v1.4.2 버전에는 업데이트된 대시보드 UI와 새로운 사용자 메타데이터 렌더링 엔진이 포함되어 있습니다. 시스템 아키텍처 웹 서버: Nginx 1.24 Alpine 애플리케이션 엔진: PHP 8.2 FPM 템플릿 파서: Smarty v4.3.1 동적 위젯 렌더링을 위해 통합 데이터베이스:...
CVE-2026-54390
CVE-2026-54390 — JTL Shop Smarty SSTI 一括エクスプロイト 認証前のお問い合わせフォーム → メール件名 → fetch'string:' → RCE 概要 CVE-2026-54390 は、JTL Shop 5.2.0–5.7.1 における緊急 CVSS 9.8 レベルの認証不要のサーバーサイドテンプレートインジェクション SSTI です。 SmartyRenderer::renderTemplate メソッドは、メールの件名行を $smarty-fetch'string:' . $subject に渡し、Smarty...
EUVD-2026-68814
Smarty: SSRF via redirect bypass of trusteduri using fetch...
Smarty: SSRF via redirect bypass of trusted_uri using {fetch}
When a Security policy is active, fetch validates the requested remote URL against the trusteduri allowlist via Security::isTrustedUri. For non-http:// schemes e.g. https:// the resource was then read with filegetcontents, which follows HTTP redirects by default. Because isTrustedUri only validat...
CVE-2026-62993
Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. Prior to 4.5.7 and 5.8.2, depending on the release line, Smarty's fetch handling in libs/plugins/function.fetch.php and src/FunctionHandler/Fetch.php used Security::isTrustedUri to...
DEBIAN-CVE-2026-62993
Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. Prior to 4.5.7 and 5.8.2, depending on the release line, Smarty's fetch handling in libs/plugins/function.fetch.php and src/FunctionHandler/Fetch.php used Security::isTrustedUri to...
CVE-2026-62993
Smarty is a PHP template engine. In versions prior to 4.5.7 and 5.8.2 , the {fetch} tag (handled in libs/plugins/function.fetch.php and src/FunctionHandler/Fetch.php) validated only the initial remote URL against the trusted_uri allowlist via Security::isTrustedUri(). Because PHP's file_get_conte...
CVE-2026-62993 Smarty: SSRF via redirect bypass of trusted_uri using {fetch}
Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. Prior to 4.5.7 and 5.8.2, depending on the release line, Smarty's fetch handling in libs/plugins/function.fetch.php and src/FunctionHandler/Fetch.php used Security::isTrustedUri to...
CVE-2026-62993 Smarty: SSRF via redirect bypass of trusted_uri using {fetch}
Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. Prior to 4.5.7 and 5.8.2, depending on the release line, Smarty's fetch handling in libs/plugins/function.fetch.php and src/FunctionHandler/Fetch.php used Security::isTrustedUri to...
PT-2026-84035
Name of the Vulnerable Software and Affected Versions Smarty versions prior to 4.5.7 Smarty versions prior to 5.8.2 Description Smarty is a PHP template engine that separates presentation from application logic. A flaw exists in the fetch handling within libs/plugins/function.fetch.php and...
CVE-2026-38725
xipblog module v2.0.1 and before for PrestaShop allows unauthenticated remote attackers to inject arbitrary JavaScript via the name and content parameters in ajax.php. The input is stored in the database without HTML sanitization and rendered in Smarty templates without output escaping, resulting...
CVE-2026-38725
xipblog module v2.0.1 and before for PrestaShop allows unauthenticated remote attackers to inject arbitrary JavaScript via the name and content parameters in ajax.php. The input is stored in the database without HTML sanitization and rendered in Smarty templates without output escaping, resulting...
EUVD-2026-67768
xipblog module v2.0.1 and before for PrestaShop allows unauthenticated remote attackers to inject arbitrary JavaScript via the name and content parameters in ajax.php. The input is stored in the database without HTML sanitization and rendered in Smarty templates without output escaping, resulting...
Linux Distros Unpatched Vulnerability : CVE-2026-62992
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. Prior to 5.8.2 and 4.5.7 on the 4.x line,...
