CVE-2010-4724

CRITICAL 10.0CVE-2010-4724 · Published 03/02/2011 · updated 16/06/2026

In short

CVE-2010-4724 is a CRITICAL (CVSS 10.0) vulnerability affecting smarty (smarty).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 79.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
smarty smarty	`= 1.0= 1.0a= 1.0b= 1.1.0= 1.2.0= 1.2.1= 1.2.2= 1.3.0= 1.3.1= 1.3.2= 1.4.0= 1.4.1= 1.4.2= 1.4.3= 1.4.4= 1.4.5= 1.4.6= 1.5.0= 1.5.1= 1.5.2= 2.0.0= 2.0.1= 2.1.0= 2.1.1= 2.2.0= 2.3.0= 2.3.1= 2.4.0= 2.4.1= 2.4.2= 2.5.0= 2.6.0= 2.6.1= 2.6.10= 2.6.11= 2.6.12= 2.6.13= 2.6.14= 2.6.15= 2.6.16= 2.6.17= 2.6.18= 2.6.2= 2.6.20= 2.6.22= 2.6.24= 2.6.25= 2.6.26= 2.6.3= 2.6.4= 2.6.5= 2.6.6= 2.6.7= 2.6.9= 3.0.0≤ 3.0.0`	No fix yet

Description

Multiple unspecified vulnerabilities in the parser implementation in Smarty before 3.0.0 RC3 have unknown impact and remote attack vectors.

References

smarty-php.googlecode.com/svn/trunk/distribution/change_log.txt

More vulnerabilities in smarty

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

smarty

= 1.0= 1.0a= 1.0b= 1.1.0= 1.2.0= 1.2.1= 1.2.2= 1.3.0= 1.3.1= 1.3.2= 1.4.0= 1.4.1= 1.4.2= 1.4.3= 1.4.4= 1.4.5= 1.4.6= 1.5.0= 1.5.1= 1.5.2= 2.0.0= 2.0.1= 2.1.0= 2.1.1= 2.2.0= 2.3.0= 2.3.1= 2.4.0= 2.4.1= 2.4.2= 2.5.0= 2.6.0= 2.6.1= 2.6.10= 2.6.11= 2.6.12= 2.6.13= 2.6.14= 2.6.15= 2.6.16= 2.6.17= 2.6.18= 2.6.2= 2.6.20= 2.6.22= 2.6.24= 2.6.25= 2.6.26= 2.6.3= 2.6.4= 2.6.5= 2.6.6= 2.6.7= 2.6.9= 3.0.0≤ 3.0.0

No fix yet

More vulnerabilities in smarty

See all →