Lucene search
+L

4 matches found

Mageia
Mageia
added 2023/01/24 7:58 a.m.53 views

Updated php-smarty packages fix security vulnerability

It was discovered that there was a potential cross-site scripting vulnerability in smarty3, a widely-used PHP templating engine. In Smarty before 3.1.47 and 4.x before 4.2.1, libs/plugins/function.mailto.php allows XSS. A web page that uses smartyfunctionmailto, and that could be parameterized...

5.4CVSS3.1AI score0.00857EPSS
SaveExploits1References3
Mageia
Mageia
added 2022/06/13 8:44 p.m.52 views

Updated php-smarty packages fix security vulnerability

Template authors could inject php code by choosing a malicious block name or include file name. CVE-2022-29221...

8.8CVSS2.7AI score0.04841EPSS
SaveExploits1References4
Mageia
Mageia
added 2022/04/02 10:22 p.m.134 views

Updated php-smarty packages fix security vulnerability

Updated php-smarty packages to version 4 for php 8 compatibility and to fix security vulnerabilities...

9.8CVSS3.8AI score0.82316EPSS
SaveExploits4References3
OSV
OSV
added 2014/11/21 12:44 p.m.12 views

MGASA-2014-0468 Updated php-smarty packages fix security vulnerabilities

Cross-site scripting XSS vulnerability in the SmartyException class in Smarty aka smarty-php before 3.1.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that trigger a Smarty exception CVE-2012-4437. Smarty before 3.1.21 allows remote attackers to bypass t...

7.5CVSS6AI score0.03127EPSS
SaveExploits1References3
Rows per page
Query Builder