CVE-2011-1028

Опубликовано: 20 нояб. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

The $smarty.template variable in Smarty3 allows attackers to possibly execute arbitrary PHP code via the sysplugins/smarty_internal_compile_private_special_variable.php file.

Ссылки

https://access.redhat.com/security/cve/cve-2011-1028
Broken Link
https://seclists.org/oss-sec/2011/q1/313
Mailing List
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2011-1028
Third Party Advisory
https://access.redhat.com/security/cve/cve-2011-1028
Broken Link
https://seclists.org/oss-sec/2011/q1/313
Mailing List
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2011-1028
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:smarty:smarty:*:*:*:*:*:*:*:*

Версия от 3.0.0 (включая) до 3.0.7 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 66%

0.00517

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2011-1028

CVSS3: 9.8

ubuntu

около 6 лет назад

The $smarty.template variable in Smarty3 allows attackers to possibly execute arbitrary PHP code via the sysplugins/smarty_internal_compile_private_special_variable.php file.

CVE-2011-1028

CVSS3: 9.8

debian

около 6 лет назад

The $smarty.template variable in Smarty3 allows attackers to possibly ...

GHSA-6frx-2r5w-c524

CVSS3: 9.8

github

больше 3 лет назад

Smarty3 Arbitrary PHP Code Execution

EPSS

Процентиль: 66%

0.00517

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-20