PT-2011-1676 · Smarty · Smarty

Published 2011-02-03 · Updated 2011-02-04 · CVE-2010-4726

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Smarty versions prior to 3.0.0 RC1

Description There is an unspecified vulnerability in the math plugin of Smarty, allowing for remote attack vectors. The impact of this issue is unknown.

Recommendations For versions prior to 3.0.0 RC1, update to version 3.0.0 RC1 or later to resolve the issue.

Fix

Related Identifiers

CVE-2010-4726

Affected Products

Smarty

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2010-4726 · Security Note
• https://osv.dev/vulnerability/CVE-2010-4726 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2010-4726 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-4726 · Vendor Advisory
• http://smarty-php.googlecode.com/svn/trunk/distribution/change_log.txt · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4726 · Note