critical9.8
CVE-2011-1028
The $smarty.template variable in Smarty3 allows attackers to possibly execute arbitrary PHP code via the sysplugins/smarty_internal_compile_private_special_var…
Impact
The $smarty.template variable in Smarty3 allows attackers to possibly execute arbitrary PHP code via the sysplugins/smarty_internal_compile_private_special_variable.php file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Smarty | Smarty | from 3.0.0 before 3.0.7 |
| Debian | Debian Linux | Versions 8.0, 9.0, 10.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://access.redhat.com/security/cve/cve-2011-1028
- https://seclists.org/oss-sec/2011/q1/313
- https://security-tracker.debian.org/tracker/CVE-2011-1028
- https://access.redhat.com/security/cve/cve-2011-1028
- https://seclists.org/oss-sec/2011/q1/313
- https://security-tracker.debian.org/tracker/CVE-2011-1028