What’s Vulnerable › Vulnerabilities

CVE-2008-1066

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2008-02-28 · updated 2026-06-16
• Weakness: CWE-20

Description

The modifier.regex_replace.php plugin in Smarty before 2.6.19, as used by Serendipity (S9Y) and other products, allows attackers to call arbitrary PHP functions via templates, related to a '\0' character in a search string.

Affected products

• Smarty: through 2.6.18

References

• http://blog.s9y.org/archives/191-Serendipity-1.3-beta1-released.html
• http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00008.html
• http://secunia.com/advisories/29241
• http://secunia.com/advisories/29392
• http://secunia.com/advisories/29398
• http://secunia.com/advisories/29405
• http://secunia.com/advisories/29562
• http://secunia.com/advisories/29839
• http://security.gentoo.org/glsa/glsa-201111-04.xml
• http://www.debian.org/security/2008/dsa-1520
• http://www.phpinsider.com/smarty-forum/viewtopic.php?p=47652
• http://www.securityfocus.com/bid/28105

Get alerted when CVE-2008-1066 or the next vulnerability affects your stack