Description
Unknown vulnerability in the regex_replace modifier (modifier.regex_replace.php) in Smarty before 2.6.8 allows attackers to execute arbitrary PHP code.
References
- 14729 third-party-advisory
- 12941 vdb-entry
- http://news.php.net/php.smarty.dev/2673
- GLSA-200503-35 vendor-advisory
- smarty-regexreplace-security-bpass(19880) vdb-entry
- 1013556 vdb-entry