The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The modifier.regex_replace.php plugin in Smarty before 2.6.19, as used by Serendipity (S9Y) and other products, allows attackers to call arbitrary PHP functions via templates, related to a '\0' character in a search string.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade dev-php/PEAR-PhpDocumentor.Upgrade dev-php/smarty. | Oct 30, 2017 | Feb 28, 2008 |
| Suse | — | Upgrade moodle-csUpgrade moodle-koUpgrade moodle-lvUpgrade moodle-afUpgrade moodle-msUpgrade moodle-sqUpgrade moodle-ukUpgrade moodle-noUpgrade moodle-bsUpgrade moodle-euUpgrade moodle-etUpgrade moodle-roUpgrade moodle-trUpgrade moodle-heUpgrade moodle-de_duUpgrade suse-releaseUpgrade moodle-ltUpgrade moodle-beUpgrade moodle-kaUpgrade moodle-caUpgrade moodle-frUpgrade moodle-zh_cnUpgrade moodle-viUpgrade moodle-esUpgrade moodle-arUpgrade moodle-jaUpgrade moodle-glUpgrade moodle-hiUpgrade moodle-kmUpgrade moodle-gaUpgrade moodle-soUpgrade moodle-bgUpgrade moodle-itUpgrade moodleUpgrade moodle-mi_tnUpgrade moodle-srUpgrade moodle-idUpgrade moodle-fiUpgrade moodle-deUpgrade moodle-daUpgrade moodle-elUpgrade moodle-ruUpgrade moodle-knUpgrade moodle-ptUpgrade moodle-huUpgrade moodle-hrUpgrade moodle-tlUpgrade moodle-svUpgrade moodle-skUpgrade moodle-isUpgrade moodle-thUpgrade moodle-slUpgrade moodle-nlUpgrade moodle-plUpgrade moodle-nnUpgrade moodle-fa | Feb 17, 2015 | Feb 28, 2008 |
| Ubuntu | — | Upgrade smarty | Nov 19, 2024 | Feb 28, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub