CVE-2014-8350

Published: Nov 3, 2014Modified: May 6, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Smarty before 3.1.21 allows remote attackers to bypass the secure mode restrictions and execute arbitrary PHP code as demonstrated by "{literal}<{/literal}script language=php>" in a template.

Affected (100)

Products: Smarty: Smarty

Smarty

1 product

Smarty

Configuration A

100 vulnerable

Vulnerable Software	Affected Versions
Smarty Smarty	Up to 3.1.20
Smarty Smarty	Version 1.0
Smarty Smarty	Version 1.0a
Smarty Smarty	Version 1.0b
Smarty Smarty	Version 1.1.0
Smarty Smarty	Version 1.2.0
Smarty Smarty	Version 1.2.1
Smarty Smarty	Version 1.2.2
Smarty Smarty	Version 1.3.0
Smarty Smarty	Version 1.3.1
Smarty Smarty	Version 1.3.2
Smarty Smarty	Version 1.4.0
Smarty Smarty	Version 1.4.0 b1
Smarty Smarty	Version 1.4.0 b2
Smarty Smarty	Version 1.4.1
Smarty Smarty	Version 1.4.2
Smarty Smarty	Version 1.4.3
Smarty Smarty	Version 1.4.4
Smarty Smarty	Version 1.4.5
Smarty Smarty	Version 1.4.6
Smarty Smarty	Version 1.5.0
Smarty Smarty	Version 1.5.1
Smarty Smarty	Version 1.5.2
Smarty Smarty	Version 2.0.0
Smarty Smarty	Version 2.0.1
Smarty Smarty	Version 2.1.0
Smarty Smarty	Version 2.1.1
Smarty Smarty	Version 2.2.0
Smarty Smarty	Version 2.3.0
Smarty Smarty	Version 2.3.1
Smarty Smarty	Version 2.4.0
Smarty Smarty	Version 2.4.1
Smarty Smarty	Version 2.4.2
Smarty Smarty	Version 2.5.0
Smarty Smarty	Version 2.5.0 rc1
Smarty Smarty	Version 2.5.0 rc2
Smarty Smarty	Version 2.6.0
Smarty Smarty	Version 2.6.0 rc1
Smarty Smarty	Version 2.6.0 rc2
Smarty Smarty	Version 2.6.0 rc3
Smarty Smarty	Version 2.6.10
Smarty Smarty	Version 2.6.11
Smarty Smarty	Version 2.6.12
Smarty Smarty	Version 2.6.13
Smarty Smarty	Version 2.6.14
Smarty Smarty	Version 2.6.15
Smarty Smarty	Version 2.6.16
Smarty Smarty	Version 2.6.17
Smarty Smarty	Version 2.6.18
Smarty Smarty	Version 2.6.1
Smarty Smarty	Version 2.6.20
Smarty Smarty	Version 2.6.22
Smarty Smarty	Version 2.6.24
Smarty Smarty	Version 2.6.25
Smarty Smarty	Version 2.6.26
Smarty Smarty	Version 2.6.2
Smarty Smarty	Version 2.6.3
Smarty Smarty	Version 2.6.4
Smarty Smarty	Version 2.6.5
Smarty Smarty	Version 2.6.6
Smarty Smarty	Version 2.6.7
Smarty Smarty	Version 2.6.9
Smarty Smarty	Version 3.0.0
Smarty Smarty	Version 3.0.0 beta4
Smarty Smarty	Version 3.0.0 beta5
Smarty Smarty	Version 3.0.0 beta6
Smarty Smarty	Version 3.0.0 beta7
Smarty Smarty	Version 3.0.0 beta8
Smarty Smarty	Version 3.0.0 rc1
Smarty Smarty	Version 3.0.0 rc2
Smarty Smarty	Version 3.0.0 rc3
Smarty Smarty	Version 3.0.0 rc4
Smarty Smarty	Version 3.0.1
Smarty Smarty	Version 3.0.2
Smarty Smarty	Version 3.0.3
Smarty Smarty	Version 3.0.4
Smarty Smarty	Version 3.0.5
Smarty Smarty	Version 3.0.6
Smarty Smarty	Version 3.0.7
Smarty Smarty	Version 3.1.0
Smarty Smarty	Version 3.1.10
Smarty Smarty	Version 3.1.11
Smarty Smarty	Version 3.1.12
Smarty Smarty	Version 3.1.13
Smarty Smarty	Version 3.1.14
Smarty Smarty	Version 3.1.15
Smarty Smarty	Version 3.1.16
Smarty Smarty	Version 3.1.17
Smarty Smarty	Version 3.1.18
Smarty Smarty	Version 3.1.19
Smarty Smarty	Version 3.1.1
Smarty Smarty	Version 3.1.2
Smarty Smarty	Version 3.1.3
Smarty Smarty	Version 3.1.4
Smarty Smarty	Version 3.1.5
Smarty Smarty	Version 3.1.6
Smarty Smarty	Version 3.1.7
Smarty Smarty	Version 3.1.8
Smarty Smarty	Version 3.1.9
Smarty Smarty	Version 3.1 rc1