PT-2019-6613 · Smarty · Smarty3

Jan Lieskovsky · Published 2019-11-20 · Updated 2022-04-22 · CVE-2011-1028

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Smarty3 (affected versions not specified)

Description The issue allows attackers to possibly execute arbitrary PHP code via the sysplugins/smarty internal compile private special variable.php file. This is related to the $smarty.template variable in Smarty3.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2011-1028

GHSA-6FRX-2R5W-C524

Affected Products

Smarty3

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2011-1028 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-1028 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-1028 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-1028 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-6frx-2r5w-c524 · Vendor Advisory
• https://github.com/smarty-php/smarty/commit/0154f17de2b2dd16ff9c016923015ac19af9c0cb · Note
• https://github.com/smarty-php/smarty · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1028 · Note
• https://access.redhat.com/security/cve/cve-2011-1028 · Note
• https://t.me/cibsecurity/8225 · Telegram Post
• https://seclists.org/oss-sec/2011/q1/313 · Note
• https://web.archive.org/web/20110609032516/http://smarty-php.googlecode.com/svn/trunk/distribution/change_log.txt · Note
• https://smarty.net/forums/viewtopic.php?t=18815 · Note