CVE Vulnerabilities

CVE-2010-4725

Published: Feb 03, 2011 | Modified: Feb 15, 2011
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Smarty before 3.0.0 RC3 does not properly handle an on value of the asp_tags option in the php.ini file, which has unspecified impact and remote attack vectors.

Affected Software

Name Vendor Start Version End Version
Smarty Smarty * 3.0.0
Smarty Smarty 1.0 1.0
Smarty Smarty 1.0a 1.0a
Smarty Smarty 1.0b 1.0b
Smarty Smarty 1.1.0 1.1.0
Smarty Smarty 1.2.0 1.2.0
Smarty Smarty 1.2.1 1.2.1
Smarty Smarty 1.2.2 1.2.2
Smarty Smarty 1.3.0 1.3.0
Smarty Smarty 1.3.1 1.3.1
Smarty Smarty 1.3.2 1.3.2
Smarty Smarty 1.4.0 1.4.0
Smarty Smarty 1.4.0 1.4.0
Smarty Smarty 1.4.0 1.4.0
Smarty Smarty 1.4.1 1.4.1
Smarty Smarty 1.4.2 1.4.2
Smarty Smarty 1.4.3 1.4.3
Smarty Smarty 1.4.4 1.4.4
Smarty Smarty 1.4.5 1.4.5
Smarty Smarty 1.4.6 1.4.6
Smarty Smarty 1.5.0 1.5.0
Smarty Smarty 1.5.1 1.5.1
Smarty Smarty 1.5.2 1.5.2
Smarty Smarty 2.0.0 2.0.0
Smarty Smarty 2.0.1 2.0.1
Smarty Smarty 2.1.0 2.1.0
Smarty Smarty 2.1.1 2.1.1
Smarty Smarty 2.2.0 2.2.0
Smarty Smarty 2.3.0 2.3.0
Smarty Smarty 2.3.1 2.3.1
Smarty Smarty 2.4.0 2.4.0
Smarty Smarty 2.4.1 2.4.1
Smarty Smarty 2.4.2 2.4.2
Smarty Smarty 2.5.0 2.5.0
Smarty Smarty 2.5.0 2.5.0
Smarty Smarty 2.5.0 2.5.0
Smarty Smarty 2.6.0 2.6.0
Smarty Smarty 2.6.0 2.6.0
Smarty Smarty 2.6.0 2.6.0
Smarty Smarty 2.6.0 2.6.0
Smarty Smarty 2.6.1 2.6.1
Smarty Smarty 2.6.2 2.6.2
Smarty Smarty 2.6.3 2.6.3
Smarty Smarty 2.6.4 2.6.4
Smarty Smarty 2.6.5 2.6.5
Smarty Smarty 2.6.6 2.6.6
Smarty Smarty 2.6.7 2.6.7
Smarty Smarty 2.6.9 2.6.9
Smarty Smarty 2.6.10 2.6.10
Smarty Smarty 2.6.11 2.6.11
Smarty Smarty 2.6.12 2.6.12
Smarty Smarty 2.6.13 2.6.13
Smarty Smarty 2.6.14 2.6.14
Smarty Smarty 2.6.15 2.6.15
Smarty Smarty 2.6.16 2.6.16
Smarty Smarty 2.6.17 2.6.17
Smarty Smarty 2.6.18 2.6.18
Smarty Smarty 2.6.20 2.6.20
Smarty Smarty 2.6.22 2.6.22
Smarty Smarty 2.6.24 2.6.24
Smarty Smarty 2.6.25 2.6.25
Smarty Smarty 2.6.26 2.6.26
Smarty Smarty 3.0.0 3.0.0
Smarty Smarty 3.0.0 3.0.0
Smarty Smarty 3.0.0 3.0.0
Smarty Smarty 3.0.0 3.0.0
Smarty Smarty 3.0.0 3.0.0
Smarty Smarty 3.0.0 3.0.0

References