Vulnerabilities in Smarty 1.4.2