3 matches found
EUVD-2026-97101
omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme because the files placed into /.local/state/omarchy/current/theme may include executable content from an untrusted Git repository...
PT-2020-12630
Name of the Vulnerable Software and Affected Versions Deskpro versions prior to 2019.8.0 Description An issue was discovered in Deskpro that allows administrators to modify the helpdesk interface by editing /portal/api/style/edit-theme-set/template-sources theme templates, using TWIG as its...
CVE-2006-2516
mainfile.php in XOOPS 2.0.13.2 and earlier, when registerglobals is enabled, allows remote attackers to overwrite variables such as $xoopsOption'nocommon' and conduct directory traversal attacks or include PHP files via 1 xoopsConfiglanguage to misc.php or 2 xoopsConfigthemeset to index.php, as...