Known vulnerabilities in Smarty 2.6.15

Software: Smarty
Version: 2.6.15
Software CPE: cpe:2.3:a:smarty_php_net:smarty:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 12
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Smarty version 2.6.15 Smarty 2.6.15 is affected by 12 vulnerabilities: 7 high, 3 medium, 2 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU41180 - Improper Control of Generation of Code ('Code Injection')
CVE-2014-8350
CWE-94 Medium
No
No
- 03.11.2014 SB2014110304
SB2014102312
SB2014102313
#VU43453 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-4437
CWE-79 Low
No
No
3.1.12 01.10.2012 SB2012100122
SB2013031103
#VU43732 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-4277
CWE-79 Low
No
No
3.1.8 14.08.2012 SB2012081406
#VU45377 - Improper input validation
CVE-2010-4725
CWE-20 High
No
No
- 03.02.2011 SB2011020302
#VU45378 - Improper input validation
CVE-2010-4726
CWE-20 High
No
No
- 03.02.2011 SB2011020302
#VU45379 - Improper input validation
CVE-2010-4727
CWE-20 High
No
No
- 03.02.2011 SB2011020302
#VU45380 - Improper input validation
CVE-2009-5052
CWE-20 High
No
No
- 03.02.2011 SB2011020302
#VU45381 - Improper input validation
CVE-2009-5053
CWE-20 Medium
No
No
- 03.02.2011 SB2011020302
#VU45382 - Permissions, Privileges, and Access Controls
CVE-2009-5054
CWE-264 Medium
No
No
- 03.02.2011 SB2011020303
#VU45383 - Improper input validation
CVE-2010-4722
CWE-20 High
No
No
- 03.02.2011 SB2011020302
#VU45384 - Permissions, Privileges, and Access Controls
CVE-2010-4723
CWE-264 High
No
No
- 03.02.2011 SB2011020302
#VU45385 - Improper input validation
CVE-2010-4724
CWE-20 High
No
No
- 03.02.2011 SB2011020302