=========================================================== .___ __ __ _________________ __ __ __| _/|__|/ |_ / ___\_` __ \__ \ | | \/ __ | | \\_ __\ / /_/ > | \// __ \| | / /_/ | | || | \___ /|__| (____ /____/\____ | |__||__| /_____/ \/ \/ grep rough audit - static analysis tool v2.8 written by @Wireghoul =================================[justanotherhacker.com]=== smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/change_log.txt-6-29.10.2018 smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/change_log.txt:7: - bugfix Smarty::$php_handling == PHP_PASSTHRU (default) did eat the "\n" (newline) character if it did directly followed smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/change_log.txt-8- a PHP tag like "?>" or other https://github.com/smarty-php/smarty/issues/501 ############################################## smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/change_log.txt-61- - bugfix strip-block produces different output in Smarty v3.1.32 https://github.com/smarty-php/smarty/issues/436 smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/change_log.txt:62: - bugfix Smarty::compileAllTemplates ignores `$extension` parameter https://github.com/smarty-php/smarty/issues/437 smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/change_log.txt-63- https://github.com/smarty-php/smarty/pull/438 ############################################## smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/change_log.txt-606- 02.11.2015 smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/change_log.txt:607: - bugfix {include} with variable file name like {include file="foo_`$bar`.tpl"} did fail in 3.1.28-dev https://github.com/smarty-php/smarty/issues/102 smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/change_log.txt-608- ############################################## smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/demo/plugins/cacheresource.pdo.php-343- { smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/demo/plugins/cacheresource.pdo.php:344: return (is_null($this->database)) ? "`{$this->table}`" : "`{$this->database}`.`{$this->table}`"; smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/demo/plugins/cacheresource.pdo.php-345- } ############################################## smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/plugins/function.mailto.php-103- } smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/plugins/function.mailto.php:104: return '<script type="text/javascript">eval(unescape(\'' . $js_encode . '\'))</script>'; smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/plugins/function.mailto.php-105- } elseif ($encode === 'javascript_charcode') { ############################################## smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/plugins/function.math.php-97- $smarty_math_result = null; smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/plugins/function.math.php:98: eval("\$smarty_math_result = " . $equation . ";"); smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/plugins/function.math.php-99- if (empty($params[ 'format' ])) { ############################################## smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/plugins/shared.literal_compiler_param.php-32- $t = null; smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/plugins/shared.literal_compiler_param.php:33: eval("\$t = " . $params[ $index ] . ";"); smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/plugins/shared.literal_compiler_param.php-34- return $t; ############################################## smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_cacheresource_custom.php-153- if (isset($content)) { smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_cacheresource_custom.php:154: eval('?>' . $content); smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_cacheresource_custom.php-155- $cached->content = null; ############################################## smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_cacheresource_keyvaluestore.php-121- if (isset($content)) { smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_cacheresource_keyvaluestore.php:122: eval('?>' . $content); smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_cacheresource_keyvaluestore.php-123- return true; ############################################## smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_internal_cacheresource_file.php-103- if ($update && defined('HHVM_VERSION')) { smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_internal_cacheresource_file.php:104: eval('?>' . file_get_contents($_smarty_tpl->cached->filepath)); smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_internal_cacheresource_file.php-105- return true; ############################################## smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_internal_compile_extends.php-79- } smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_internal_compile_extends.php:80: $this->compileInclude($compiler, $file); smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_internal_compile_extends.php-81- } ############################################## smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_internal_compile_extends.php-127- */ smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_internal_compile_extends.php:128: private function compileInclude(Smarty_Internal_TemplateCompilerBase $compiler, $template) smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_internal_compile_extends.php-129- { ############################################## smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_internal_compile_include_php.php-68- $_file = null; smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_internal_compile_include_php.php:69: eval('$_file = @' . $_attr[ 'file' ] . ';'); smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_internal_compile_include_php.php-70- if (!isset($compiler->smarty->security_policy) && file_exists($_file)) { ############################################## smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_internal_compile_insert.php-67- // save possible attributes smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_internal_compile_insert.php:68: eval('$_name = @' . $_attr[ 'name' ] . ';'); smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_internal_compile_insert.php-69- if (isset($_attr[ 'assign' ])) { ############################################## smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_internal_compile_insert.php-84- $_filepath = false; smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_internal_compile_insert.php:85: eval('$_script = @' . $_attr[ 'script' ] . ';'); smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_internal_compile_insert.php-86- if (!isset($compiler->smarty->security_policy) && file_exists($_script)) { ############################################## smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_internal_runtime_tplfunction.php-114- // make PHP function known smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_internal_runtime_tplfunction.php:115: eval($match[ 0 ]); smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_internal_runtime_tplfunction.php-116- if (function_exists($_function)) { ############################################## smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_internal_templatelexer.php-973- $this->yy_global_pattern5 = smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_internal_templatelexer.php:974: $this->replace("/\G((SMARTYldel)SMARTYautoliteral\\s+SMARTYliteral)|\G((SMARTYldel)SMARTYalliteral\\s*SMARTYrdel)|\G((SMARTYldel)SMARTYal[\/]literal\\s*SMARTYrdel)|\G((SMARTYldel)SMARTYal[\/])|\G((SMARTYldel)SMARTYal[0-9]*[a-zA-Z_]\\w*)|\G((SMARTYldel)SMARTYal)|\G([\"])|\G([`][$])|\G([$][0-9]*[a-zA-Z_]\\w*)|\G([$])|\G(([^\"\\\\]*?)((?:\\\\.[^\"\\\\]*?)*?)(?=((SMARTYldel)SMARTYal|\\$|`\\$|\"SMARTYliteral)))|\G([\S\s])/isS"); smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_internal_templatelexer.php-975- } ############################################## smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_resource_recompiled.php-51- try { smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_resource_recompiled.php:52: eval('?>' . $_smarty_tpl->compiler->compileTemplate($_smarty_tpl)); smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_resource_recompiled.php-53- } catch (Exception $e) { ############################################## smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_template_compiled.php-251- if (defined('HHVM_VERSION')) { smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_template_compiled.php:252: eval('?>' . file_get_contents($this->filepath)); smarty3-3.1.34+20190228.1.c9f0de05+selfpack1/libs/sysplugins/smarty_template_compiled.php-253- } else {