PT-2011-1675
CVE-2010-4725
·
Published
2011-02-03
·
Updated
2011-02-15
Description by
CVSS 2.0
10
HighMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Smarty versions prior to 3.0.0 RC3
Description
The issue is related to the handling of the asp tags option in the php.ini file. It does not properly handle an on value, which has unspecified impact and can be exploited remotely.
Recommendations
For versions prior to 3.0.0 RC3, update to version 3.0.0 RC3 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾