760 matches found
Design/Logic Flaw
Multiple unspecified vulnerabilities in Smarty before 3.0.0 beta 6 have unknown impact and attack vectors...
Design/Logic Flaw
Unspecified vulnerability in the math plugin in Smarty before 3.0.0 RC1 has unknown impact and remote attack vectors. NOTE: this might overlap CVE-2009-1669...
CVE-2009-5054
Smarty before 3.0.0 beta 4 does not consider the umask value when setting the permissions of files, which might allow attackers to bypass intended access restrictions via standard filesystem operations...
CVE-2009-5053
Unspecified vulnerability in Smarty before 3.0.0 beta 6 allows remote attackers to execute arbitrary PHP code by injecting this code into a cache file...
CVE-2010-4723
Smarty before 3.0.0, when security is enabled, does not prevent access to the 1 dynamic and 2 private object members of an assigned object, which has unspecified impact and remote attack vectors...
CVE-2010-4722
Unspecified vulnerability in the fetch plugin in Smarty before 3.0.2 has unknown impact and remote attack vectors...
CVE-2010-4725
Smarty before 3.0.0 RC3 does not properly handle an on value of the asptags option in the php.ini file, which has unspecified impact and remote attack vectors...
CVE-2010-4726
Unspecified vulnerability in the math plugin in Smarty before 3.0.0 RC1 has unknown impact and remote attack vectors. NOTE: this might overlap CVE-2009-1669...
Code injection
Unspecified vulnerability in Smarty before 3.0.0 beta 6 allows remote attackers to execute arbitrary PHP code by injecting this code into a cache file...
CVE-2009-5052
Multiple unspecified vulnerabilities in Smarty before 3.0.0 beta 6 have unknown impact and attack vectors...
CVE-2009-5054
Smarty before 3.0.0 beta 4 does not consider the umask value when setting the permissions of files, which might allow attackers to bypass intended access restrictions via standard filesystem operations...
CVE-2010-4723
Smarty before 3.0.0, when security is enabled, does not prevent access to the 1 dynamic and 2 private object members of an assigned object, which has unspecified impact and remote attack vectors...
CVE-2010-4723
Smarty before 3.0.0, when security is enabled, does not prevent access to the dynamic and private object members of an assigned object. The impact is unspecified in the provided documents, and there are no explicit exploit details or vectors described. No remediation steps are provided in the con...
CVE-2010-4727
Smarty before 3.0.0 beta 7 (Smarty PHP templating engine) is affected by improper handling of the tags. The initial sources describe the issue as having unspecified impact and remote attack vectors; no concrete exploitation details or confirmed fixes are provided in the connected documents. The ...
CVE-2010-4726
CVE-2010-4726 corresponds to Smarty’s math plugin vulnerability prior to Smarty 3.0.0 RC1. Connected advisories/entries confirm multiple remote vulnerabilities in Smarty (e.g., CVE-2008-4810, CVE-2009-1669) that could allow remote code execution. Affected component: Smarty templates engine (libs/...
CVE-2009-5053
Unspecified vulnerability in Smarty before 3.0.0 beta 6 allows remote attackers to execute arbitrary PHP code by injecting this code into a cache file...
CVE-2010-4723
Smarty before 3.0.0, when security is enabled, does not prevent access to the 1 dynamic and 2 private object members of an assigned object, which has unspecified impact and remote attack vectors...
CVE-2010-4722
Technical details about CVE-2010-4722 are not provided in the supplied documents. No affected products, vectors, or remediation are specified here. Monitor for updates from vendors and security advisories.
CVE-2010-4724
CVE-2010-4724 concerns multiple unspecified vulnerabilities in the parser implementation of the Smarty template engine, affecting versions before 3.0.0 RC3. The available sources describe the issues as having unknown impact and remote attack vectors, with no concrete exploitation details or remed...