716 matches found
GHSA-3RPF-5RQV-689Q PHP Code Injection by malicious function name in smarty
Template authors could inject php code by choosing a malicous function name. Sites that cannot fully trust template authors should update as soon as possible. Please upgrade to 3.1.39 or higher...
Privilege Escalation
smarty/smarty is vulnerable to privilege escalation. An attacker is able to access smarty.templateobject in sandbox mode...
Remote Code Execution (RCE)
Smarty is vulnerable to remote code execution. The library does not properly handle the illegal function names in function name='blah'/function, allowing a malicious user to inject and execute arbitrary commands...
CVE-2021-26119
Smarty before 3.1.39 allows a Sandbox Escape because $smarty.templateobject can be accessed in sandbox mode...
CVE-2021-26120
Smarty before 3.1.39 allows code injection via an unexpected function name after a function name= substring...
DEBIAN-CVE-2021-26120
Smarty before 3.1.39 allows code injection via an unexpected function name after a function name= substring...
DEBIAN-CVE-2021-26119
Smarty before 3.1.39 allows a Sandbox Escape because $smarty.templateobject can be accessed in sandbox mode...
CVE-2021-26119
Smarty before 3.1.39 allows a Sandbox Escape because $smarty.templateobject can be accessed in sandbox mode...
CVE-2021-26120
Smarty before 3.1.39 allows code injection via an unexpected function name after a function name= substring...
CVE-2021-26120
Smarty before 3.1.39 allows code injection via an unexpected function name after a function name= substring...
CVE-2021-26120
Smarty before 3.1.39 allows code injection via an unexpected function name after a function name= substring...
Code injection
Smarty before 3.1.39 allows a Sandbox Escape because $smarty.templateobject can be accessed in sandbox mode...
Code injection
Smarty before 3.1.39 allows code injection via an unexpected function name after a function name= substring...
CVE-2021-26119
Smarty before 3.1.39 allows a Sandbox Escape because $smarty.templateobject can be accessed in sandbox mode...
CVE-2021-26119
Smarty before 3.1.39 allows a Sandbox Escape because $smarty.templateobject can be accessed in sandbox mode...
UBUNTU-CVE-2021-26119
Smarty before 3.1.39 allows a Sandbox Escape because $smarty.templateobject can be accessed in sandbox mode...
UBUNTU-CVE-2021-26120
Smarty before 3.1.39 allows code injection via an unexpected function name after a function name= substring...
CVE-2021-26120
Smarty PHP template engine prior to version 3.1.39 is affected by CVE-2021-26120, which can enable code injection via an unexpected {function name= substring}. The issue is addressed in updates to Smarty3 (e.g., upgrading to 3.1.39+ or package updates in Fedora/Debian/Mageia). Remediation is to u...
