CVE-2006-7193: High severity Smarty smarty vulnerability
DISPUTED PHP remote file inclusion vulnerability in unittest/testcases.php in Smarty 2.6.1 allows remote attackers to execute arbitrary PHP code via a URL in the SMARTYDIR parameter. NOTE: this issue is disputed by CVE and a third party because SMARTYDIR is a constant.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-7193?
The severity of CVE-2006-7193 is disputed, but it is classified as a remote file inclusion vulnerability that could potentially allow execution of arbitrary PHP code.
How do I fix CVE-2006-7193?
To fix CVE-2006-7193, ensure that you do not use untrusted input for the SMARTY_DIR parameter and consider updating to a more secure version of Smarty.
What software versions are affected by CVE-2006-7193?
CVE-2006-7193 affects Smarty version 2.6.1.
Is CVE-2006-7193 a confirmed vulnerability?
CVE-2006-7193 is a disputed vulnerability, with some sources arguing that SMARTY_DIR is a constant and not exploitable.
What kind of attack is possible with CVE-2006-7193?
An attacker may exploit CVE-2006-7193 to include remote files and execute arbitrary PHP code on the server.