Unknown vulnerability in the regex_replace modifier (modifier.regex_replace.php) in Smarty before 2.6.8 allows attackers to execute arbitrary PHP code.
https://exchange.xforce.ibmcloud.com/vulnerabilities/19880
http://www.securityfocus.com/bid/12941
http://securitytracker.com/id?1013556
http://security.gentoo.org/glsa/glsa-200503-35.xml