Most recent entries from all

EUVD-2026-103164

fkie_cve-2014-8350

Smarty before 3.1.21 allows remote attackers to bypass the secure mode restrictions and execute arbitrary PHP code as demonstrated by "{literal}<{/literal}script language=php>" in a template.

GHSA-2pmx-6mm6-6v72 — Smarty arbitrary PHP code execution

Affected: Packagist: smarty/smarty

Smarty before 3.1.21 allows remote attackers to bypass the secure mode restrictions and execute arbitrary PHP code as demonstrated by "{literal}<{/literal}script language=php>" in a template.

gsd-2014-8350

Withdrawn: UBUNTU-CVE-2014-8350

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: smarty3

Smarty before 3.1.21 allows remote attackers to bypass the secure mode restrictions and execute arbitrary PHP code as demonstrated by "{literal}<{/literal}script language=php>" in a template.