EUVD-2020-10891

Malware in sbrugna...

CVE-2020-18980

Remote Code Executon vulnerability in Halo 0.4.3 via the remoteAddr and themeName parameters...

CVE-2020-18980

Remote Code Executon vulnerability in Halo 0.4.3 via the remoteAddr and themeName parameters...

CVE-2020-18980

Remote Code Executon vulnerability in Halo 0.4.3 via the remoteAddr and themeName parameters...

PT-2021-10260

Name of the Vulnerable Software and Affected Versions: Halo version 0.4.3 Description: A remote code execution issue exists due to the remoteAddr and themeName parameters. Recommendations: For Halo version 0.4.3, avoid using the remoteAddr and themeName parameters until a fix is available. Consid...

CVE-2020-18980: Undefined Security Weakness

Remote Code Executon vulnerability in Halo 0.4.3 via the remoteAddr and themeName parameters...

CVE-2011-3352

Zikula 1.3.0 build 3168 and probably prior has XSS flaw due to improper sanitization of the 'themename' parameter by setting default, modifying and deleting themes. A remote attacker with Zikula administrator privilege could use this flaw to execute arbitrary HTML or web script code in the contex...

CVE-2011-3352

Zikula 1.3.0 build 3168 and probably prior has XSS flaw due to improper sanitization of the 'themename' parameter by setting default, modifying and deleting themes. A remote attacker with Zikula administrator privilege could use this flaw to execute arbitrary HTML or web script code in the contex...

CVE-2011-3352

Zikula 1.3.0 build 3168 and probably prior has XSS flaw due to improper sanitization of the 'themename' parameter by setting default, modifying and deleting themes. A remote attacker with Zikula administrator privilege could use this flaw to execute arbitrary HTML or web script code in the contex...

CVE-2011-3352: Improper Neutralization of Input During Web Page Generation

Zikula 1.3.0 build 3168 and probably prior has XSS flaw due to improper sanitization of the 'themename' parameter by setting default, modifying and deleting themes. A remote attacker with Zikula administrator privilege could use this flaw to execute arbitrary HTML or web script code in the contex...

PT-2019-6667

Name of the Vulnerable Software and Affected Versions Zikula versions prior to 1.3.0 build 3168 Description The issue is due to improper sanitization of the themename parameter, allowing a remote attacker with administrator privileges to execute arbitrary HTML or web script code in the context of...

CVE-2011-3979: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in ztemp/viewcompiled/Theme/themeadminsetasdefault.php in the theme module in Zikula Application Framework 1.3.0 build 3168, 1.2.7, and probably other versions allows remote attackers to inject arbitrary web script or HTML via the themename parameter in the...

PT-2011-4791

Name of the Vulnerable Software and Affected Versions Zikula Application Framework versions 1.2.7, 1.3.0 build 3168 Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the themename parameter in the setasdefault...