Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The smarty_function_math function in libs/plugins/function.math.php in Smarty 2.6.22 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the equation attribute of the math function. NOTE: some of these details are obtained from third party information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Smarty 'libs/plugins/function.math.php' 安全绕过漏洞
Vulnerability Description
Smarty是一款被称为"模板引擎"，的工具，用"模板/演示框架"来形容更准确，它提供了编程模板与丰富的工具来实现自动化设计应用程序的表示层任务。 Smarty 2.6.22版本的libs/plugins/function.math.php中的smarty_function_math函数会允许见机行事的攻击者可以借助数学函数的方程属性中的外壳元字符，执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A