Vulnerabilidades em smarty-php
7 resultadosAnálise Vexday
O smarty-php apresenta 5 vulnerabilidades catalogadas, nenhuma delas atualmente sob exploração ativa ou classificada como crítica. A fraqueza dominante (CWE-94 - Improper Control of Generation of Code) indica risco de execução de código não autorizado, embora nenhuma tenha sido divulgada nos últimos 90 dias, sugerindo um panorama de risco estável e de baixa prioridade exploratória.
CVE-2022-29221HIGHPHP Code Injection by malicious block or filename in SmartyEPSS 4.9%CVE-2021-21408HIGHAccess to restricted PHP code by dynamic static class access in smartyEPSS 2.2%CVE-2021-29454HIGHSandbox Escape by math function in smartyEPSS 1.9%CVE-2023-28447HIGHCross site scripting vulnerability in Javascript escaping in smarty/smartyEPSS 1.0%CVE-2024-35226HIGHPHP Code Injection by malicious attribute in extends-tag in SmartyEPSS 0.5%CVE-2026-62992MEDIUMSmarty: Symlink path traversal out of trusted directoriesEPSS 0.4%CVE-2026-62996MEDIUMSmarty Security stream restriction bypass through stream: resourceEPSS 0.3%