CVE-2005-0913

HIGH 7.5CVE-2005-0913 · Published 02/05/2005 · updated 16/06/2026

In short

CVE-2005-0913 is a HIGH (CVSS 7.5) vulnerability affecting smarty (smarty).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 74.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
smarty smarty	`= 2.6.2= 2.6.3= 2.6.4= 2.6.5= 2.6.6= 2.6.7`	No fix yet

Description

Unknown vulnerability in the regex_replace modifier (modifier.regex_replace.php) in Smarty before 2.6.8 allows attackers to execute arbitrary PHP code.

References

news.php.net/php.smarty.dev/2673 · Patch
secunia.com/advisories/14729 · Patch
security.gentoo.org/glsa/glsa-200503-35.xml · Patch
securitytracker.com/id · Patch
securityfocus.com/bid/12941
exchange.xforce.ibmcloud.com/vulnerabilities/19880

More vulnerabilities in smarty

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free