CVE-2014-8350

Smarty before 3.1.21 allows remote attackers to bypass the secure mode restrictions and execute arbitrary PHP code as demonstrated by…

published November 3, 2014

CVSS
—
EPSS
3%
Percentile
87.8
In the wild
Unconfirmed
What it is

Smarty before 3.1.21 allows remote attackers to bypass the secure mode restrictions and execute arbitrary PHP code as demonstrated by "{literal}<{/literal}script language=php>" in a template.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03127 · 87.8th percentile
Published
2014-11-03T16:00Z
EPSS history
Timeline
  • 03 NOV 16:00Z
    Smarty before 3.1.21 allows remote attackers to bypass the secure mode restrictions and execute arbitrary PHP code as demonstrated by…
    cvelistv5