Login Request a demo
SM
Product
Smarty
by Smarty · last CVE Sep 29, 2023
31
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities31In the news0Timeline
Severity mix
Critical 4High 5Medium 4Low 0
Severity
All severities31Critical4High5Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Smarty to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-26120
9.8
82%
Feb 22
Smarty before 3.1.39 allows code injection via an unexpected function name after a {function name= substring
Affected: before 3.1.39
CVE-2011-1028
9.8
2%
Nov 20
The $smarty.template variable in Smarty3 allows attackers to possibly execute arbitrary PHP code via the sysplugins/smarty_internal_compile_private_special_variable.php file
Affected: 3.0.0 before 3.0.7
CVE-2017-1000480
9.8
3%
Jan 3
Smarty 3 before 3.1.32 is vulnerable to a PHP code injection when calling fetch() or display() functions on custom resources that does not sanitize template name
Affected: 3.0.0 before 3.1.32
CVE-2006-7105
9.8
2%
Mar 3
PHP remote file inclusion vulnerability in libs/Smarty.class.php in Smarty 2.6.9 allows remote attackers to execute arbitrary PHP code via a URL in the filename parameter
Affected: 2.6.9
Showing 4