security.nuyts.tech
CVE-2008-4810 – NuytsTech Security
The _expand_quoted_text function in libs/Smarty_Compiler.class.php in Smarty 2.6.20 before r2797 allows remote attackers to execute arbitrary PHP code via vecto