Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2011-1028

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-6frx-2r5w-c524

Smarty3 Arbitrary PHP Code Execution The `$smarty.template` variable in Smarty3 allows attackers to possibly execute arbitrary PHP code via the `sysplugins/smarty_internal_compile_private_special_variable.php` file.

gitlab/packagist/smarty/smarty/CVE-2011-1028

Improper Input Validation The $smarty.template variable in Smarty3 allows attackers to possibly execute arbitrary PHP code via the sysplugins/smarty_internal_compile_private_special_variable.php file.