Description (CNA)
PHP remote file inclusion vulnerability in libs/Smarty.class.php in Smarty 2.6.9 allows remote attackers to execute arbitrary PHP code via a URL in the filename parameter. NOTE: in the original disclosure, filename is used in a function definition, so this report is probably incorrect
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29603
- http://www.security-express.com/archives/fulldisclosure/2006-10/0292.html
- http://www.securityfocus.com/bid/20557
- http://www.security-express.com/archives/fulldisclosure/2006-10/0299.html
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.