Vulnerabilities in Smarty PHP template engine renders popular CMS platforms open to abuse

… by Daniele Scanu, allows an unauthenticated user to launch an SQL injection attack to bypass authentication and reset the administrator password.