5 matches found
MAL-2025-2692 Malicious code in newtheme (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37975c22c99a1fe8dd968985aa358d4982778370c1eae16b94fd12afb266fc32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in newtheme (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37975c22c99a1fe8dd968985aa358d4982778370c1eae16b94fd12afb266fc32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2014-100029
Multiple directory traversal vulnerabilities in class/session.php in Ganesha Digital Library GDL 4.2 allow remote attackers to read arbitrary files via a .. dot dot in the 1 newlang or 2 newtheme parameter...
CVE-2014-100029
Multiple directory traversal vulnerabilities in class/session.php in Ganesha Digital Library GDL 4.2 allow remote attackers to read arbitrary files via a .. dot dot in the 1 newlang or 2 newtheme parameter...
[Full-disclosure] PsychoStats 3.0.6b and prior
newtheme variable only expects "sane" behaivor, no arguement or an arguement with any special character, etc.. will cause it to error and display the full path to $pathtohlstats/includes/smarty/Smarty.class.php $pathtohlstats/server.php?newcss=styles.css&newtheme=00 Ex: Warning: Smarty error:...