Skip to content
OpenAdvisories
Unscored DSA-1520-1 1 CVE

smarty - arbitrary code execution

Published Mar 16, 2008 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 3.1 smarty 2.6.9-1sarge1
Debian · 4.0 smarty 2.6.14-1etch1

Vulnerabilities 1

  • Unscored —

    The modifier.regex_replace.php plugin in Smarty before 2.6.19, as used by Serendipity (S9Y) and other products, allows …