Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2011-1028
9.8
CRITICALCVSS v3
Published
November 20, 2019
CVSS v2
7.5 HIGH
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
The $smarty.template variable in Smarty3 allows attackers to possibly execute arbitrary PHP code via the sysplugins/smarty_internal_compile_private_special_variable.php file.
smarty-php/smarty
GitHubSmarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic.
GitHubSmarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic.>= 3.0.0, < 3.0.7NVD
Packagist