Skip to content
OpenAdvisories
Critical · 9.8 CVE-2006-7105 EUVD-2006-7087GHSA-jjpx-47jx-v4xx

PHP remote file inclusion vulnerability in libs/Smarty.class.php in Smarty 2.6.9 allows remote attackers to execute arbitrary PHP code via …

Published Mar 3, 2007 · Updated Jan 17, 2025 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in libs/Smarty.class.php in Smarty 2.6.9 allows remote attackers to execute arbitrary PHP code via a URL in the filename parameter. NOTE: in the original disclosure, filename is used in a function definition, so this report is probably incorrect

References