Unscored DSA-1919-1 2 CVEs

smarty - several vulnerabilities

Published Oct 25, 2009 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 4.0	smarty	2.6.14-1etch2
Debian · 5.0	smarty	2.6.20-1.2

Vulnerabilities 2

Unscored —

CVE-2008-4810

The _expand_quoted_text function in libs/Smarty_Compiler.class.php in Smarty 2.6.20 before r2797 allows remote attacker…

Oct 31, 2008
Unscored —

CVE-2009-1669 Public exploit EPSS 14%

The smarty_function_math function in libs/plugins/function.math.php in Smarty 2.6.22 allows context-dependent attackers…

May 18, 2009