CVE-2009-5053: Smarty

High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.

Unspecified vulnerability in Smarty before 3.0.0 beta 6 allows remote attackers to execute arbitrary PHP code by injecting this code into a cache file.

Affected products

• Smarty Smarty: up to and including 3.0.0; version 1.0 only; version 1.0a only; version 1.0b only; version 1.1.0 only; version 1.2.0 only; …

Published 2011-02-03. Last modified 2026-06-16.