[USN-791-3] Smarty vulnerability

=========================================================== Ubuntu Security Notice USN-791-3 June 24, 2009 smarty vulnerability CVE-2009-1669 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 9.04 This advisory also applies ...

USN-791-1: Moodle vulnerabilities

Thor Larholm discovered that PHPMailer, as used by Moodle, did not correctly escape email addresses. A local attacker with direct access to the Moodle database could exploit this to execute arbitrary commands as the web server user. CVE-2007-3215 Nigel McNie discovered that fetching https URLs di...

USN-791-3: Smarty vulnerability

It was discovered that Smarty did not correctly filter certain math inputs. A remote attacker using Smarty via a web service could exploit this to execute subsets of shell commands as the web server user...

LightOpenCMS 0.1 - 'smarty.php?cwd' Local File Inclusion

LightOpenCMS 0.1 smarty.php cwd Local File Inclusion Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download: http://sourceforge.net/project/showfiles.php?groupid=251474 smarty.php define"SMARTYDIR",...

Fedora Core 11 FEDORA-2009-5520 (php-Smarty)

The remote host is missing an update to php-Smarty announced via advisory FEDORA-2009-5520. OpenVAS Vulnerability Test $Id: fcore20095520.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5520 php-Smarty Authors: Thomas Reinke Copyright: Copyright c...

Fedora Core 10 FEDORA-2009-5525 (php-Smarty)

The remote host is missing an update to php-Smarty announced via advisory FEDORA-2009-5525. OpenVAS Vulnerability Test $Id: fcore20095525.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5525 php-Smarty Authors: Thomas Reinke Copyright: Copyright c...

Fedora Core 10 FEDORA-2009-5525 (php-Smarty)

The remote host is missing an update to php-Smarty announced via advisory FEDORA-2009-5525. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Fedora Core 9 FEDORA-2009-5516 (php-Smarty)

The remote host is missing an update to php-Smarty announced via advisory FEDORA-2009-5516. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Fedora Core 11 FEDORA-2009-5520 (php-Smarty)

The remote host is missing an update to php-Smarty announced via advisory FEDORA-2009-5520. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Fedora 11 : php-Smarty-2.6.25-1.fc11 (2009-5520)

This update fixes : - Bug 501564 - CVE-2009-1669 Smarty: arbitrary commands execution via shell metacharacters in the equation attribute of the math function Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Fedora 10 : php-Smarty-2.6.25-1.fc10 (2009-5525)

This update fixes : - Bug 501564 - CVE-2009-1669 Smarty: arbitrary commands execution via shell metacharacters in the equation attribute of the math function Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Fedora 9 : php-Smarty-2.6.25-1.fc9 (2009-5516)

This update fixes : - Bug 501564 - CVE-2009-1669 Smarty: arbitrary commands execution via shell metacharacters in the equation attribute of the math function Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

[SECURITY] Fedora 11 Update: php-Smarty-2.6.25-1.fc11

Although Smarty is known as a "Template Engine", it would be more accurately described as a "Template/Presentation Framework." That is, it provides the programmer and template designer with a wealth of tools to automate tasks commonly dealt with at the presentation layer of an application. I stre...

[SECURITY] Fedora 9 Update: php-Smarty-2.6.25-1.fc9

Although Smarty is known as a "Template Engine", it would be more accurately described as a "Template/Presentation Framework." That is, it provides the programmer and template designer with a wealth of tools to automate tasks commonly dealt with at the presentation layer of an application. I stre...

[SECURITY] Fedora 10 Update: php-Smarty-2.6.25-1.fc10

Although Smarty is known as a "Template Engine", it would be more accurately described as a "Template/Presentation Framework." That is, it provides the programmer and template designer with a wealth of tools to automate tasks commonly dealt with at the presentation layer of an application. I stre...

Information disclosure

The smartyfunctionmath function in libs/plugins/function.math.php in Smarty 2.6.22 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the equation attribute of the math function. NOTE: some of these details are obtained from third party information...

CVE-2009-1669

The smartyfunctionmath function in libs/plugins/function.math.php in Smarty 2.6.22 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the equation attribute of the math function. NOTE: some of these details are obtained from third party information...

CVE-2009-1669

CVE-2009-1669 affects the Smarty template engine (Smarty 2.6.22) via the smarty_function_math plugin. The vulnerability allows a context-dependent attacker to execute arbitrary commands through shell metacharacters placed in the equation attribute of the math function, enabling remote code execut...

CVE-2009-1669

The smartyfunctionmath function in libs/plugins/function.math.php in Smarty 2.6.22 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the equation attribute of the math function. NOTE: some of these details are obtained from third party information...

CVE-2009-1669

The smartyfunctionmath function in libs/plugins/function.math.php in Smarty 2.6.22 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the equation attribute of the math function. NOTE: some of these details are obtained from third party information...