VDB
CVE-2008-4810
CVE-2008-4810
PUBLISHED
CVSS 7.5 HIGH
The _expand_quoted_text function in libs/Smarty_Compiler.class.php in Smarty 2.6.20 before r2797 allows remote attackers to execute arbitrary PHP code via vectors related to templates and (1) a dollar-sign character, aka "php executed in templates;" and (2) a double quoted literal string, aka a "function injection security hole." NOTE: each vector affects slightly different SVN revisions.
EPSS 2.19% · 81.1th percentile
Risk Scores
CVSS 2.0
7.5
EPSS Score
2.19%
81.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| smarty | smarty | 1.0, 1.0a, 1.0b |
| n/a | n/a | n/a |
Timeline
- Oct 31, 2008 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 19, 2022 EPSS Score
- Feb 10, 2023 EPSS Score
- Apr 4, 2023 EPSS Score
- May 26, 2023 EPSS Score
- Jul 18, 2023 EPSS Score
References
- smarty-expandquotedtext-code-execution(46031) vdb
- DSA-1691 vendor-advisory
- http://code.google.com/p/smarty-php/source/detail?r=2784&path=/trunk/libs/Smarty_Compiler.class.php url
- http://securityvulns.ru/Udocument746.html url
- https://bugs.gentoo.org/attachment.cgi?id=169804&action=view url
- http://smarty-php.googlecode.com/svn/trunk/NEWS url
- [oss-security] 20081025 Regarding SA32329 (Smarty "_expand_quoted_text()" Security Bypass) mailing-list
- 32329 third-party-advisory
- 31862 vdb
- http://code.google.com/p/smarty-php/source/detail?r=2797&path=/trunk/libs/Smarty_Compiler.class.php url
- https://nvd.nist.gov/vuln/detail/CVE-2008-4810 advisory