mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-27 14:32:30 +02:00
686 B
686 B
CVE-2017-1000480
Description
Smarty 3 before 3.1.32 is vulnerable to a PHP code injection when calling fetch() or display() functions on custom resources that does not sanitize template name.
POC
Reference
No PoCs from references.