| शीर्षक | formtools.org / Form Tools project Form Tools Core 3.1.1 Server Side Template Injection |
|---|
| विवरण | In FormTools 3.1.1, Clients::updateClientSettingsTab() persists the client-supplied page_titles value into account_settings without checking the may_edit_page_titles permission flag. The value is then rendered by General::evalSmartyString() using an unsecured Smarty 3.1.31 engine, so a low-privileged client can submit Smarty tags such as {fetch file='...'} to read arbitrary server files including the database configuration, and potentially {include_php file='...'} to execute server-side PHP files. |
|---|
| स्रोत | ⚠️ https://github.com/wawyw/cve_report/blob/main/formtools_1.md |
|---|
| उपयोगकर्ता | wenyouwen (UID 99589) |
|---|
| सबमिशन | 03/09/2026 06:45 AM (28 दिन पहले) |
|---|
| संयम | 30/09/2026 09:07 PM (28 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 412350 [formtools.org Form Tools तक 3.1.1 Client Settings Clients.class.php updateClientSettingsTab page_titles अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|