CVE-2010-4727

Published: Feb 3, 2011Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Smarty before 3.0.0 beta 7 does not properly handle the <?php and ?> tags, which has unspecified impact and remote attack vectors.

Affected (64)

Products: Smarty: Smarty

Smarty

1 product

Smarty

Configuration A

64 vulnerable

Vulnerable Software	Affected Versions
Smarty Smarty	Up to 3.0.0
Smarty Smarty	Version 1.0
Smarty Smarty	Version 1.0a
Smarty Smarty	Version 1.0b
Smarty Smarty	Version 1.1.0
Smarty Smarty	Version 1.2.0
Smarty Smarty	Version 1.2.1
Smarty Smarty	Version 1.2.2
Smarty Smarty	Version 1.3.0
Smarty Smarty	Version 1.3.1
Smarty Smarty	Version 1.3.2
Smarty Smarty	Version 1.4.0
Smarty Smarty	Version 1.4.0 b1
Smarty Smarty	Version 1.4.0 b2
Smarty Smarty	Version 1.4.1
Smarty Smarty	Version 1.4.2
Smarty Smarty	Version 1.4.3
Smarty Smarty	Version 1.4.4
Smarty Smarty	Version 1.4.5
Smarty Smarty	Version 1.4.6
Smarty Smarty	Version 1.5.0
Smarty Smarty	Version 1.5.1
Smarty Smarty	Version 1.5.2
Smarty Smarty	Version 2.0.0
Smarty Smarty	Version 2.0.1
Smarty Smarty	Version 2.1.0
Smarty Smarty	Version 2.1.1
Smarty Smarty	Version 2.2.0
Smarty Smarty	Version 2.3.0
Smarty Smarty	Version 2.3.1
Smarty Smarty	Version 2.4.0
Smarty Smarty	Version 2.4.1
Smarty Smarty	Version 2.4.2
Smarty Smarty	Version 2.5.0
Smarty Smarty	Version 2.5.0 rc1
Smarty Smarty	Version 2.5.0 rc2
Smarty Smarty	Version 2.6.0
Smarty Smarty	Version 2.6.0 rc1
Smarty Smarty	Version 2.6.0 rc2
Smarty Smarty	Version 2.6.0 rc3
Smarty Smarty	Version 2.6.10
Smarty Smarty	Version 2.6.11
Smarty Smarty	Version 2.6.12
Smarty Smarty	Version 2.6.13
Smarty Smarty	Version 2.6.14
Smarty Smarty	Version 2.6.15
Smarty Smarty	Version 2.6.16
Smarty Smarty	Version 2.6.17
Smarty Smarty	Version 2.6.18
Smarty Smarty	Version 2.6.1
Smarty Smarty	Version 2.6.20
Smarty Smarty	Version 2.6.22
Smarty Smarty	Version 2.6.24
Smarty Smarty	Version 2.6.25
Smarty Smarty	Version 2.6.26
Smarty Smarty	Version 2.6.2
Smarty Smarty	Version 2.6.3
Smarty Smarty	Version 2.6.4
Smarty Smarty	Version 2.6.5
Smarty Smarty	Version 2.6.6
Smarty Smarty	Version 2.6.7
Smarty Smarty	Version 2.6.9
Smarty Smarty	Version 3.0.0 beta4
Smarty Smarty	Version 3.0.0 beta5

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

http://smarty-php.googlecode.com/svn/trunk/distribution/change_log.txt

Source: cve@mitre.org

http://smarty-php.googlecode.com/svn/trunk/distribution/change_log.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.