NVD

Id
4625  
Name
CVE-2008-4811  
Description
The _expand_quoted_text function in libs/Smarty_Compiler.class.php in Smarty 2.6.20 r2797 and earlier allows remote attackers to execute arbitrary PHP code via vectors related to templates and a (backslash) before a dollar-sign character.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-10-31  
Modified Date
2009-07-01  
Seq
2008-4811  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
28926 4625 CVE-2008-4811 http://securityvulns.ru/Udocument746.html  View
28927 4625 CVE-2008-4811 DSA-1691  View
28928 4625 CVE-2008-4811 [oss-security] 20081025 Regarding SA32329 (Smarty "_expand_quoted_text()" Security Bypass)  View
28929 4625 CVE-2008-4811 31862  View
28930 4625 CVE-2008-4811 smarty-expandquotedtext-code-execution1(46406)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51083 JVNDB-2008-006393 Smarty の libs/Smarty_Compiler.class.php における任意の PHP コードを実行される脆弱性 Smarty の libs/Smarty_Compiler.class.php の _expand_quoted_text 関数は、テンプレートおよびドル文字前の (バックスラッシュ) に関する処理に不備があるため、任意の PHP コードを実行される脆弱性が存在します。 CVE-2008-4811 34924 CVE-2008-4811 4625 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006393.html 2008-10-31 2012-12-20 View