Highwisskid

**Name of the Vulnerable Software and Affected Versions** Smarty versions prior to 3.1.45 Smarty versions 4.0.0 through 4.1.0 **Description** The issue is related to incorrect code generation management in the PHP Smarty template engine, allowing a remote attacker to execute arbitrary PHP code. Template authors could inject PHP code by choosing a malicious `{block}` name or `{include}` file name. This affects sites that cannot fully trust template authors. **Recommendations** For versions prior to 3.1.45, upgrade to version 3.1.45 to receive a patch for this issue. For versions 4.0.0 through 4.1.0, upgrade to version 4.1.1 to receive a patch for this issue. As a temporary workaround, consider restricting the ability of template authors to choose `{block}` names or `{include}` file names until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** Smarty versions prior to 3.1.43 Smarty versions prior to 4.0.3 **Description** Smarty is a template engine for PHP that facilitates the separation of presentation from application logic. Template authors could run restricted static php methods prior to versions 3.1.43 and 4.0.3. **Recommendations** For versions prior to 3.1.43, update to version 3.1.43 to receive the patch. For versions prior to 4.0.3, update to version 4.0.3 to receive the patch.

**Name of the Vulnerable Software and Affected Versions** Smarty versions prior to 3.1.42 and 4.0.2 **Description** The issue is related to the incorrect handling of code generation in the Smarty template engine for PHP. This allows template authors to run arbitrary PHP code by crafting a malicious math string. If a math string is passed through as user-provided data to the math function, external users could run arbitrary PHP code by crafting a malicious math string. **Recommendations** To resolve the issue, users should upgrade to version 3.1.42 or 4.0.2 to receive a patch. As a temporary workaround, consider restricting the use of the math function to minimize the risk of exploitation. Avoid using user-provided data in the math function until the issue is resolved.