Vulnerability Database

290,020

Total vulnerabilities in the database

CVE-2012-4277

Cross-site scripting (XSS) vulnerability in the smarty_function_html_options_optoutput function in distribution/libs/plugins/function.html_options.php in Smarty before 3.1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • Published: Aug 14, 2012
  • Updated: Apr 13, 2023
  • CVE: CVE-2012-4277
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:P/A:N
Software From Fixed in
smarty / smarty 1.4.3 1.4.3.x
smarty / smarty 1.0 1.0.x
smarty / smarty 1.0b 1.0b.x
smarty / smarty 2.3.1 2.3.1.x
smarty / smarty - 3.1.7.x
smarty / smarty 3.0.0-beta6 3.0.0-beta6.x
smarty / smarty 2.6.0-rc3 2.6.0-rc3.x
smarty / smarty 2.6.25 2.6.25.x
smarty / smarty 3.0.0-beta8 3.0.0-beta8.x
smarty / smarty 3.0.5 3.0.5.x
smarty / smarty 1.4.0 1.4.0.x
smarty / smarty 1.4.5 1.4.5.x
smarty / smarty 2.6.1 2.6.1.x
smarty / smarty 2.6.7 2.6.7.x
smarty / smarty 2.6.20 2.6.20.x
smarty / smarty 2.3.0 2.3.0.x
smarty / smarty 1.0a 1.0a.x
smarty / smarty 1.1.0 1.1.0.x
smarty / smarty 1.4.0-b2 1.4.0-b2.x
smarty / smarty 2.6.0 2.6.0.x
smarty / smarty 2.6.15 2.6.15.x
smarty / smarty 2.6.3 2.6.3.x
smarty / smarty 3.0.0-rc2 3.0.0-rc2.x
smarty / smarty 2.6.14 2.6.14.x
smarty / smarty 3.1.1 3.1.1.x
smarty / smarty 2.5.0-rc1 2.5.0-rc1.x
smarty / smarty 1.2.1 1.2.1.x
smarty / smarty 2.6.17 2.6.17.x
smarty / smarty 3.1.6 3.1.6.x
smarty / smarty 2.6.11 2.6.11.x
smarty / smarty 2.6.0-rc2 2.6.0-rc2.x
smarty / smarty 3.0.2 3.0.2.x
smarty / smarty 3.0.0-rc3 3.0.0-rc3.x
smarty / smarty 3.1.4 3.1.4.x
smarty / smarty 3.0.0-beta7 3.0.0-beta7.x
smarty / smarty 1.3.0 1.3.0.x
smarty / smarty 1.4.1 1.4.1.x
smarty / smarty 2.5.0-rc2 2.5.0-rc2.x
smarty / smarty 2.0.1 2.0.1.x
smarty / smarty 2.5.0 2.5.0.x
smarty / smarty 1.4.2 1.4.2.x
smarty / smarty 1.5.0 1.5.0.x
smarty / smarty 3.0.4 3.0.4.x
smarty / smarty 2.1.0 2.1.0.x
smarty / smarty 2.6.22 2.6.22.x
smarty / smarty 1.5.2 1.5.2.x
smarty / smarty 3.1-rc1 3.1-rc1.x
smarty / smarty 2.6.12 2.6.12.x
smarty / smarty 2.6.18 2.6.18.x
smarty / smarty 1.5.1 1.5.1.x
smarty / smarty 2.0.0 2.0.0.x
smarty / smarty 2.4.1 2.4.1.x
smarty / smarty 3.1.0 3.1.0.x
smarty / smarty 2.6.6 2.6.6.x
smarty / smarty 2.6.26 2.6.26.x
smarty / smarty 3.1.3 3.1.3.x
smarty / smarty 2.6.16 2.6.16.x
smarty / smarty 2.6.9 2.6.9.x
smarty / smarty 1.2.2 1.2.2.x
smarty / smarty 3.0.0-beta5 3.0.0-beta5.x
smarty / smarty 3.0.0-rc4 3.0.0-rc4.x
smarty / smarty 3.0.7 3.0.7.x
smarty / smarty 2.6.0-rc1 2.6.0-rc1.x
smarty / smarty 3.1.5 3.1.5.x
smarty / smarty 2.6.24 2.6.24.x
smarty / smarty 2.1.1 2.1.1.x
smarty / smarty 3.0.3 3.0.3.x
smarty / smarty 2.6.4 2.6.4.x
smarty / smarty 3.0.0 3.0.0.x
smarty / smarty 2.2.0 2.2.0.x
smarty / smarty 2.4.2 2.4.2.x
smarty / smarty 3.1.2 3.1.2.x
smarty / smarty 3.0.1 3.0.1.x
smarty / smarty 2.6.10 2.6.10.x
smarty / smarty 2.6.2 2.6.2.x
smarty / smarty 1.4.0-b1 1.4.0-b1.x
smarty / smarty 2.6.13 2.6.13.x
smarty / smarty 3.0.0-beta4 3.0.0-beta4.x
smarty / smarty 2.6.5 2.6.5.x
smarty / smarty 3.0.6 3.0.6.x
smarty / smarty 1.3.2 1.3.2.x
smarty / smarty 2.4.0 2.4.0.x
smarty / smarty 1.3.1 1.3.1.x
smarty / smarty 1.4.4 1.4.4.x
smarty / smarty 1.4.6 1.4.6.x
smarty / smarty 1.2.0 1.2.0.x
smarty / smarty 3.0.0-rc1 3.0.0-rc1.x