Smarty before 3.1.21 allows remote attackers to bypass the secure mode restrictions and execute arbitrary PHP code as demonstrated by "{literal}<{/literal}script language=php>" in a template.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: debian
Published: 2014-11-03T16:00:00
Updated: 2017-09-07T15:57:01
Reserved: 2014-10-20T00:00:00
Link: CVE-2014-8350
JSON object: View
NVD Information
Status : Modified
Published: 2014-11-03T16:55:08.010
Modified: 2017-09-08T01:29:22.747
Link: CVE-2014-8350
JSON object: View
Redhat Information
No data.
CWE