CVE-2009-1669
The smarty_function_math function in libs/plugins/function.math.php in Smarty 2.6.22 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the equation attribute of the math function.
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 14.1%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
The smarty_function_math function in libs/plugins/function.math.php in Smarty 2.6.22 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the equation attribute of the math function. NOTE: some of these details are obtained from third party information.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 14.12% probability · 96th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- smarty/smarty
- Source
- cve@mitre.org
References
- http://osvdb.org/54380
- http://secunia.com/advisories/35072Vendor Advisory
- http://secunia.com/advisories/35219
- http://www.securityfocus.com/bid/34918Exploit
- http://www.ubuntu.com/usn/usn-791-3
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50457
- https://www.exploit-db.com/exploits/8659
- https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01274.html
- https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01283.html
- https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01287.html
- http://osvdb.org/54380
- http://secunia.com/advisories/35072Vendor Advisory
- http://secunia.com/advisories/35219
- http://www.securityfocus.com/bid/34918Exploit
- http://www.ubuntu.com/usn/usn-791-3
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50457
- https://www.exploit-db.com/exploits/8659
- https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01274.html
- https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01283.html
- https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01287.html
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.