VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Mar 3, 2007· Updated Jun 16, 2026

CVE-2006-7105

CVE-2006-7105

Description

PHP remote file inclusion vulnerability in libs/Smarty.class.php in Smarty 2.6.9 allows remote attackers to execute arbitrary PHP code via a URL in the filename parameter. NOTE: in the original disclosure, filename is used in a function definition, so this report is probably incorrect

Affected products

2
  • Smarty/Smarty2 versions
    cpe:2.3:a:smarty:smarty:2.6.9:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:smarty:smarty:2.6.9:*:*:*:*:*:*:*
    • (no CPE)range: = 2.6.9

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.