Unscored DLA-452-1 1 CVE

smarty3 - security update

Published May 3, 2016 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 7	smarty3	3.1.10-2+deb7u1

Vulnerabilities 1

High —

CVE-2014-8350

Smarty arbitrary PHP code execution

Smarty before 3.1.21 allows remote attackers to bypass the secure mode restrictions and execute arbitrary PHP code as demonstrated by "{literal}<{/literal}script language=php>" in a template.

smarty3 smarty/smarty Debian Packagist

Nov 3, 2014