DSA-1919-1 smarty - several vulnerabilities

Bulletin has no description...

Ubuntu USN-791-3 (smarty)

The remote host is missing an update to smarty announced via advisory USN-791-3. OpenVAS Vulnerability Test $Id: ubuntu7913.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7913.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-791-3 smarty Authors: Thomas Rein...

Ubuntu: Security Advisory (USN-791-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 9.04 : smarty vulnerability (USN-791-3)

It was discovered that Smarty did not correctly filter certain math inputs. A remote attacker using Smarty via a web service could exploit this to execute subsets of shell commands as the web server user. Note that Tenable Network Security has extracted the preceding description block directly fr...

[USN-791-3] Smarty vulnerability

=========================================================== Ubuntu Security Notice USN-791-3 June 24, 2009 smarty vulnerability CVE-2009-1669 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 9.04 This advisory also applies ...

USN-791-1: Moodle vulnerabilities

Thor Larholm discovered that PHPMailer, as used by Moodle, did not correctly escape email addresses. A local attacker with direct access to the Moodle database could exploit this to execute arbitrary commands as the web server user. CVE-2007-3215 Nigel McNie discovered that fetching https URLs di...

USN-791-3: Smarty vulnerability

It was discovered that Smarty did not correctly filter certain math inputs. A remote attacker using Smarty via a web service could exploit this to execute subsets of shell commands as the web server user...

LightOpenCMS 0.1 - 'smarty.php?cwd' Local File Inclusion

LightOpenCMS 0.1 smarty.php cwd Local File Inclusion Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download: http://sourceforge.net/project/showfiles.php?groupid=251474 smarty.php define"SMARTYDIR",...

Fedora Core 10 FEDORA-2009-5525 (php-Smarty)

The remote host is missing an update to php-Smarty announced via advisory FEDORA-2009-5525. OpenVAS Vulnerability Test $Id: fcore20095525.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5525 php-Smarty Authors: Thomas Reinke Copyright: Copyright c...

Fedora Core 11 FEDORA-2009-5520 (php-Smarty)

The remote host is missing an update to php-Smarty announced via advisory FEDORA-2009-5520. OpenVAS Vulnerability Test $Id: fcore20095520.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5520 php-Smarty Authors: Thomas Reinke Copyright: Copyright c...

Fedora Core 10 FEDORA-2009-5525 (php-Smarty)

The remote host is missing an update to php-Smarty announced via advisory FEDORA-2009-5525. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Fedora Core 9 FEDORA-2009-5516 (php-Smarty)

The remote host is missing an update to php-Smarty announced via advisory FEDORA-2009-5516. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Fedora Core 11 FEDORA-2009-5520 (php-Smarty)

The remote host is missing an update to php-Smarty announced via advisory FEDORA-2009-5520. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Fedora 9 : php-Smarty-2.6.25-1.fc9 (2009-5516)

This update fixes : - Bug 501564 - CVE-2009-1669 Smarty: arbitrary commands execution via shell metacharacters in the equation attribute of the math function Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Fedora 10 : php-Smarty-2.6.25-1.fc10 (2009-5525)

This update fixes : - Bug 501564 - CVE-2009-1669 Smarty: arbitrary commands execution via shell metacharacters in the equation attribute of the math function Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Fedora 11 : php-Smarty-2.6.25-1.fc11 (2009-5520)

This update fixes : - Bug 501564 - CVE-2009-1669 Smarty: arbitrary commands execution via shell metacharacters in the equation attribute of the math function Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

[SECURITY] Fedora 11 Update: php-Smarty-2.6.25-1.fc11

Although Smarty is known as a "Template Engine", it would be more accurately described as a "Template/Presentation Framework." That is, it provides the programmer and template designer with a wealth of tools to automate tasks commonly dealt with at the presentation layer of an application. I stre...

[SECURITY] Fedora 9 Update: php-Smarty-2.6.25-1.fc9

Although Smarty is known as a "Template Engine", it would be more accurately described as a "Template/Presentation Framework." That is, it provides the programmer and template designer with a wealth of tools to automate tasks commonly dealt with at the presentation layer of an application. I stre...

[SECURITY] Fedora 10 Update: php-Smarty-2.6.25-1.fc10

Although Smarty is known as a "Template Engine", it would be more accurately described as a "Template/Presentation Framework." That is, it provides the programmer and template designer with a wealth of tools to automate tasks commonly dealt with at the presentation layer of an application. I stre...

Information disclosure

The smartyfunctionmath function in libs/plugins/function.math.php in Smarty 2.6.22 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the equation attribute of the math function. NOTE: some of these details are obtained from third party information...