CVE-2006-7105
CRITICALSmarty 2.6.9 - Remote Code Execution via Filename Parameter
Title source: llmDescription
PHP remote file inclusion vulnerability in libs/Smarty.class.php in Smarty 2.6.9 allows remote attackers to execute arbitrary PHP code via a URL in the filename parameter. NOTE: in the original disclosure, filename is used in a function definition, so this report is probably incorrect
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/29603
Various Sources mailing-list
x_refsource_fulldisc
http://www.security-express.com/archives/fulldisclosure/2006-10/0292.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/20557
Exploit mailing-list
x_refsource_fulldisc
http://www.security-express.com/archives/fulldisclosure/2006-10/0299.html
Scores
CVSS v3
9.8
EPSS
0.0174
EPSS Percentile
74.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
total
Details
CWE
CWE-94
Status
published
Products (1)
smarty/smarty
2.6.9
Published
Mar 03, 2007
Tracked Since
Feb 18, 2026