CVE-2008-1066

Published: Feb 28, 2008Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The modifier.regex_replace.php plugin in Smarty before 2.6.19, as used by Serendipity (S9Y) and other products, allows attackers to call arbitrary PHP functions via templates, related to a '\0' character in a search string.

Affected (1)

Products: Smarty: Smarty

Smarty

1 product

Smarty

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Smarty Smarty	Up to 2.6.18

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (34)

http://blog.s9y.org/archives/191-Serendipity-1.3-beta1-released.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00008.html

Source: cve@mitre.org

http://secunia.com/advisories/29241

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/29392

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/29398

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/29405

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/29562

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/29839

Source: cve@mitre.org

Vendor Advisory

http://security.gentoo.org/glsa/glsa-201111-04.xml

Source: cve@mitre.org

http://www.debian.org/security/2008/dsa-1520

Source: cve@mitre.org

http://www.phpinsider.com/smarty-forum/viewtopic.php?p=47652

Source: cve@mitre.org

http://www.securityfocus.com/bid/28105

Source: cve@mitre.org

http://www.smarty.net/misc/NEWS

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/41002

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00298.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00358.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00551.html

Source: cve@mitre.org

http://blog.s9y.org/archives/191-Serendipity-1.3-beta1-released.html