CVE-2010-4723
Severity Score
9.3
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Smarty before 3.0.0, when security is enabled, does not prevent access to the (1) dynamic and (2) private object members of an assigned object, which has unspecified impact and remote attack vectors.
El motor de plantillas PHP Smarty v3.0.0, cuando la seguridad está habilitada, no impide el acceso a los miembros tanto de los objetos (1) dinámicos como (2) privados de un objeto asignado, lo cual tiene un impacto no especificado y vectores de ataque a distancia.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2011-02-03 CVE Reserved
- 2011-02-03 CVE Published
- 2024-09-16 CVE Updated
- 2024-09-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-264: Permissions, Privileges, and Access Controls
CAPEC
References (1)
| URL | Tag | Source |
|---|---|---|
| http://smarty-php.googlecode.com/svn/trunk/distribution/change_log.txt | X_refsource_confirm |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | <= 3.0.0 Search vendor "Smarty" for product "Smarty" and version " <= 3.0.0" | rc4 |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 1.0 Search vendor "Smarty" for product "Smarty" and version "1.0" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 1.0a Search vendor "Smarty" for product "Smarty" and version "1.0a" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 1.0b Search vendor "Smarty" for product "Smarty" and version "1.0b" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 1.1.0 Search vendor "Smarty" for product "Smarty" and version "1.1.0" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 1.2.0 Search vendor "Smarty" for product "Smarty" and version "1.2.0" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 1.2.1 Search vendor "Smarty" for product "Smarty" and version "1.2.1" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 1.2.2 Search vendor "Smarty" for product "Smarty" and version "1.2.2" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 1.3.0 Search vendor "Smarty" for product "Smarty" and version "1.3.0" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 1.3.1 Search vendor "Smarty" for product "Smarty" and version "1.3.1" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 1.3.2 Search vendor "Smarty" for product "Smarty" and version "1.3.2" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 1.4.0 Search vendor "Smarty" for product "Smarty" and version "1.4.0" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 1.4.0 Search vendor "Smarty" for product "Smarty" and version "1.4.0" | b1 |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 1.4.0 Search vendor "Smarty" for product "Smarty" and version "1.4.0" | b2 |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 1.4.1 Search vendor "Smarty" for product "Smarty" and version "1.4.1" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 1.4.2 Search vendor "Smarty" for product "Smarty" and version "1.4.2" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 1.4.3 Search vendor "Smarty" for product "Smarty" and version "1.4.3" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 1.4.4 Search vendor "Smarty" for product "Smarty" and version "1.4.4" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 1.4.5 Search vendor "Smarty" for product "Smarty" and version "1.4.5" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 1.4.6 Search vendor "Smarty" for product "Smarty" and version "1.4.6" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 1.5.0 Search vendor "Smarty" for product "Smarty" and version "1.5.0" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 1.5.1 Search vendor "Smarty" for product "Smarty" and version "1.5.1" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 1.5.2 Search vendor "Smarty" for product "Smarty" and version "1.5.2" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.0.0 Search vendor "Smarty" for product "Smarty" and version "2.0.0" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.0.1 Search vendor "Smarty" for product "Smarty" and version "2.0.1" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.1.0 Search vendor "Smarty" for product "Smarty" and version "2.1.0" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.1.1 Search vendor "Smarty" for product "Smarty" and version "2.1.1" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.2.0 Search vendor "Smarty" for product "Smarty" and version "2.2.0" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.3.0 Search vendor "Smarty" for product "Smarty" and version "2.3.0" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.3.1 Search vendor "Smarty" for product "Smarty" and version "2.3.1" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.4.0 Search vendor "Smarty" for product "Smarty" and version "2.4.0" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.4.1 Search vendor "Smarty" for product "Smarty" and version "2.4.1" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.4.2 Search vendor "Smarty" for product "Smarty" and version "2.4.2" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.5.0 Search vendor "Smarty" for product "Smarty" and version "2.5.0" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.5.0 Search vendor "Smarty" for product "Smarty" and version "2.5.0" | rc1 |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.5.0 Search vendor "Smarty" for product "Smarty" and version "2.5.0" | rc2 |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.6.0 Search vendor "Smarty" for product "Smarty" and version "2.6.0" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.6.0 Search vendor "Smarty" for product "Smarty" and version "2.6.0" | rc1 |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.6.0 Search vendor "Smarty" for product "Smarty" and version "2.6.0" | rc2 |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.6.0 Search vendor "Smarty" for product "Smarty" and version "2.6.0" | rc3 |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.6.1 Search vendor "Smarty" for product "Smarty" and version "2.6.1" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.6.2 Search vendor "Smarty" for product "Smarty" and version "2.6.2" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.6.3 Search vendor "Smarty" for product "Smarty" and version "2.6.3" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.6.4 Search vendor "Smarty" for product "Smarty" and version "2.6.4" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.6.5 Search vendor "Smarty" for product "Smarty" and version "2.6.5" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.6.6 Search vendor "Smarty" for product "Smarty" and version "2.6.6" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.6.7 Search vendor "Smarty" for product "Smarty" and version "2.6.7" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.6.9 Search vendor "Smarty" for product "Smarty" and version "2.6.9" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.6.10 Search vendor "Smarty" for product "Smarty" and version "2.6.10" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.6.11 Search vendor "Smarty" for product "Smarty" and version "2.6.11" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.6.12 Search vendor "Smarty" for product "Smarty" and version "2.6.12" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.6.13 Search vendor "Smarty" for product "Smarty" and version "2.6.13" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.6.14 Search vendor "Smarty" for product "Smarty" and version "2.6.14" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.6.15 Search vendor "Smarty" for product "Smarty" and version "2.6.15" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.6.16 Search vendor "Smarty" for product "Smarty" and version "2.6.16" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.6.17 Search vendor "Smarty" for product "Smarty" and version "2.6.17" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.6.18 Search vendor "Smarty" for product "Smarty" and version "2.6.18" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.6.20 Search vendor "Smarty" for product "Smarty" and version "2.6.20" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.6.22 Search vendor "Smarty" for product "Smarty" and version "2.6.22" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.6.24 Search vendor "Smarty" for product "Smarty" and version "2.6.24" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.6.25 Search vendor "Smarty" for product "Smarty" and version "2.6.25" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 2.6.26 Search vendor "Smarty" for product "Smarty" and version "2.6.26" | - |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 3.0.0 Search vendor "Smarty" for product "Smarty" and version "3.0.0" | beta4 |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 3.0.0 Search vendor "Smarty" for product "Smarty" and version "3.0.0" | beta5 |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 3.0.0 Search vendor "Smarty" for product "Smarty" and version "3.0.0" | beta6 |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 3.0.0 Search vendor "Smarty" for product "Smarty" and version "3.0.0" | beta7 |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 3.0.0 Search vendor "Smarty" for product "Smarty" and version "3.0.0" | beta8 |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 3.0.0 Search vendor "Smarty" for product "Smarty" and version "3.0.0" | rc1 |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 3.0.0 Search vendor "Smarty" for product "Smarty" and version "3.0.0" | rc2 |
Affected
| ||||||
| Smarty Search vendor "Smarty" | Smarty Search vendor "Smarty" for product "Smarty" | 3.0.0 Search vendor "Smarty" for product "Smarty" and version "3.0.0" | rc3 |
Affected
| ||||||