CVE-2012-1066
Publication date 14 February 2012
Last updated 24 July 2024
Ubuntu priority
Cross-site scripting (XSS) vulnerability in the template module in SmartyCMS 0.9.4 allows remote attackers to inject arbitrary web script or HTML via the title bar.
Status
Package | Ubuntu Release | Status |
---|---|---|
gallery2 | ||
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
moodle | ||
16.04 LTS xenial |
Not affected
|
|
14.04 LTS trusty | Not in release | |
smarty | ||
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
Notes
sbeattie
needs triage to discover whether it only affects smartyCMS or the smarty template engine that smartyCMS is based on.