CVE		CVE-2009-1669
Status		Candidate
Description		The smarty_function_math function in libs/plugins/function.math.php in Smarty 2.6.22 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the equation attribute of the math function.  NOTE: some of these details are obtained from third party information.
Severity		High
CVSS score		10
CVSS vector		(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Phase		Assigned (01.07.2009)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-1669
References		BID : 34918
		MILW0RM : 8659
		OSVDB : 54380
		SECUNIA : 35072
		XF : smarty-smartyfunctionmath-cmd-execution(50457)
SecurityVulns:		Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
		Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)