CVE-2012-4437

Published: Oct 1, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the SmartyException class in Smarty (aka smarty-php) before 3.1.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that trigger a Smarty exception.

Affected (91)

Products: Smarty: Smarty

Smarty

1 product

Smarty

Configuration A

91 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Smarty Smarty	Version 1.0
Smarty Smarty	Version 1.0a
Smarty Smarty	Version 1.0b
Smarty Smarty	Version 1.1.0
Smarty Smarty	Version 1.2.0
Smarty Smarty	Version 1.2.1
Smarty Smarty	Version 1.2.2
Smarty Smarty	Version 1.3.0
Smarty Smarty	Version 1.3.1
Smarty Smarty	Version 1.3.2
Smarty Smarty	Version 1.4.0
Smarty Smarty	Version 1.4.0 b1
Smarty Smarty	Version 1.4.0 b2
Smarty Smarty	Version 1.4.1
Smarty Smarty	Version 1.4.2
Smarty Smarty	Version 1.4.3
Smarty Smarty	Version 1.4.4
Smarty Smarty	Version 1.4.5
Smarty Smarty	Version 1.4.6
Smarty Smarty	Version 1.5.0
Smarty Smarty	Version 1.5.1
Smarty Smarty	Version 1.5.2
Smarty Smarty	Version 2.0.0
Smarty Smarty	Version 2.0.1
Smarty Smarty	Version 2.1.0
Smarty Smarty	Version 2.1.1
Smarty Smarty	Version 2.2.0
Smarty Smarty	Version 2.3.0
Smarty Smarty	Version 2.3.1
Smarty Smarty	Version 2.4.0
Smarty Smarty	Version 2.4.1
Smarty Smarty	Version 2.4.2
Smarty Smarty	Version 2.5.0
Smarty Smarty	Version 2.5.0 rc1
Smarty Smarty	Version 2.5.0 rc2
Smarty Smarty	Version 2.6.0
Smarty Smarty	Version 2.6.0 rc1
Smarty Smarty	Version 2.6.0 rc2
Smarty Smarty	Version 2.6.0 rc3
Smarty Smarty	Version 2.6.10
Smarty Smarty	Version 2.6.11
Smarty Smarty	Version 2.6.12
Smarty Smarty	Version 2.6.13
Smarty Smarty	Version 2.6.14
Smarty Smarty	Version 2.6.15
Smarty Smarty	Version 2.6.16
Smarty Smarty	Version 2.6.17
Smarty Smarty	Version 2.6.18
Smarty Smarty	Version 2.6.1
Smarty Smarty	Version 2.6.20
Smarty Smarty	Version 2.6.22
Smarty Smarty	Version 2.6.24
Smarty Smarty	Version 2.6.25
Smarty Smarty	Version 2.6.26
Smarty Smarty	Version 2.6.2
Smarty Smarty	Version 2.6.3
Smarty Smarty	Version 2.6.4
Smarty Smarty	Version 2.6.5
Smarty Smarty	Version 2.6.6
Smarty Smarty	Version 2.6.7
Smarty Smarty	Version 2.6.9
Smarty Smarty	Version 3.0.0
Smarty Smarty	Version 3.0.0 beta4
Smarty Smarty	Version 3.0.0 beta5
Smarty Smarty	Version 3.0.0 beta6
Smarty Smarty	Version 3.0.0 beta7
Smarty Smarty	Version 3.0.0 beta8
Smarty Smarty	Version 3.0.0 rc1
Smarty Smarty	Version 3.0.0 rc2
Smarty Smarty	Version 3.0.0 rc3
Smarty Smarty	Version 3.0.0 rc4
Smarty Smarty	Version 3.0.1
Smarty Smarty	Version 3.0.2
Smarty Smarty	Version 3.0.3
Smarty Smarty	Version 3.0.4
Smarty Smarty	Version 3.0.5
Smarty Smarty	Version 3.0.6
Smarty Smarty	Version 3.0.7
Smarty Smarty	Version 3.1.0
Smarty Smarty	Version 3.1.10
Smarty Smarty	Version 3.1.11
Smarty Smarty	Version 3.1.1
Smarty Smarty	Version 3.1.2
Smarty Smarty	Version 3.1.3
Smarty Smarty	Version 3.1.4
Smarty Smarty	Version 3.1.5
Smarty Smarty	Version 3.1.6
Smarty Smarty	Version 3.1.7
Smarty Smarty	Version 3.1.8
Smarty Smarty	Version 3.1.9
Smarty Smarty	Version 3.1 rc1