Ogma CMS Cross-Site Scripting Vulnerability

Ogma CMS is an XML-based flat file content management system CMS. A cross-site scripting vulnerability exists in Ogma CMS version 0.4 Beta, which can be exploited by remote attackers to execute JavaScript code via the 'Footer Text footer' field in the 'Theme/Theme Options' screen. field in the...

CVE-2018-16379

Ogma CMS 0.4 Beta has XSS via the "Footer Text footer" field on the "Theme/Theme Options" screen...

Cross site scripting

Ogma CMS 0.4 Beta has XSS via the "Footer Text footer" field on the "Theme/Theme Options" screen...

CVE-2018-16379

Ogma CMS 0.4 Beta is affected by a Cross-Site Scripting (XSS) vulnerability that can be triggered via the "Footer Text footer" field on the Theme/Theme Options screen. Affected component: the Theme Options interface; vulnerability type: XSS. Root cause is not explicitly detailed beyond the presen...

WordPress Squirrel Theme 1.6.4 Remote File Inclusion

| Title : WP-squirrel 1.6.4 Theme R/L Files Inclusion Download Vulnerability | Author : indoushka | email : [email protected] | Tested on: windows 8.1 Français V.Pro | Download : https://wordpress.org/themes/squirrel/ ======================================= poc : requireonce $functionspath...

WordPress Pinboard 1.1.10 Theme Reflected XSS

$GET'tab' is not escaped. File: pinboard\includes\theme-options.php function pinboardthemepage addthemepage 'Pinboard Theme Options', 'pinboard' , 'Theme Options', 'pinboard' , 'editthemeoptions', 'pinboardoptions', 'pinboardadminoptionspage' ; addaction 'adminmenu', 'pinboardthemepage' ; functio...

WordPress Esplanade 1.1.4 Theme Reflected XSS

$GET'tab' is not escaped.File: esplanade\includes\theme-options.phpfunction esplanadethemepage addthemepage 'Esplanade Theme Options', 'esplanade' , 'Theme Options', 'esplanade' , 'editthemeoptions', 'esplanadeoptions', 'esplanadeadminoptionspage' ; addaction 'adminmenu', span clas...

ZomPlog <= 3.7.6 Local File Inclusion Vulnerabilty (win32)

No description provided by source. Made by Bl0od3r tech-bl0od3r.blogspot.com use IO::Socket; use Switch; $port = "80"; $target = @ARGV0; $folder = @ARGV1; @paths= "../../../../../var/log/httpd/accesslog", "../../../../../var/log/httpd/errorlog", "../apache/logs/error.log",...