EUVD-2025-34891

A remote code execution RCE vulnerability exists in the PluXml CMS theme editor, specifically in the minify.php file located under the default theme directory /themes/defaut/css/minify.php. An authenticated administrator user can overwrite this file with arbitrary PHP code via the admin panel,...

CVE-2010-3742

Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Free Simple CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 meta or 2 phpincdir parameter, a different issue than CVE-2010-3307...

CVE-2020-6632

In PrestaShop 1.7.6.2, XSS can occur during addition or removal of a QuickAccess link. This is related to AdminQuickAccessesController.php, themes/default/template/header.tpl, and themes/new-theme/js/header.js...

PT-2020-19197

Name of the Vulnerable Software and Affected Versions PrestaShop version 1.7.6.2 Description The issue is related to a potential XSS occurrence during the addition or removal of a QuickAccess link. This is associated with specific files, including AdminQuickAccessesController.php,...

CVE-2020-6632: Improper Neutralization of Input During Web Page Generation

In PrestaShop 1.7.6.2, XSS can occur during addition or removal of a QuickAccess link. This is related to AdminQuickAccessesController.php, themes/default/template/header.tpl, and themes/new-theme/js/header.js...

CFAGCMS 1- Remote File Inclusion Vulnerabilities

No description provided by source. Author : BeyazKurt - [email protected] Script : CFAGCMS Download : http://sourceforge.net/project/showfiles.php?groupid=197936 Vuln : Page themes/default/index.php, Line 15-16 : ?php include$main;? ?php include$right;?...

CVE-2012-3476

Multiple cross-site scripting XSS vulnerabilities in 1 application/views/admin/layout.php and 2 themes/default/views/header.php in the Ushahidi Platform before 2.5 allow remote authenticated users to inject arbitrary web script or HTML via vectors related to a site name...

Remote file inclusion

PHP remote file inclusion vulnerability in modchatting/themes/default/header.php in Family Connections Who is Chatting 2.2.3 allows remote attackers to execute arbitrary PHP code via a URL in the TMPLpath parameter...

CVE-2010-4988: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in modchatting/themes/default/header.php in Family Connections Who is Chatting 2.2.3 allows remote attackers to execute arbitrary PHP code via a URL in the TMPLpath parameter...

Information disclosure

Yamamah 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/default/index.php and certain other files...

PT-2011-4713

Name of the Vulnerable Software and Affected Versions Yamamah version 1.0 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by accessing specific files, such as "themes/default/index.php", which reveals the...

PT-2011-4636

Name of the Vulnerable Software and Affected Versions Jcow version 4.2.1 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by accessing specific files, such as themes/default/page.tpl.php, which reveals the...

CVE-2011-3746: Exposure of Sensitive Information to an Unauthorized Actor

Jcow 4.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/default/page.tpl.php and certain other files...

PT-2010-4723

Name of the Vulnerable Software and Affected Versions Free Simple CMS versions 1.0 and earlier Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the body, footer, header, menu left, or menu right parameter. This can be achieved by exploiting remote file...

PT-2010-5036

Name of the Vulnerable Software and Affected Versions Free Simple CMS version 1.0 Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the meta or phpincdir parameter in the themes/default/index.php file. Recommendations For Free Simple CMS version 1.0, conside...

CVE-2010-3742: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Free Simple CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 meta or 2 phpincdir parameter, a different issue than CVE-2010-3307...

Free Simple Software 1.0 - Remote File Inclusion

Free Simple Software 1.0 - Remote File Inclusion Free Simple Software V1.0 By : Dr.$audi SauDi ViRuS TeaM By : http://Sa-ViRuS.CoM Email : [email protected] Dork: Powered by free simple software Greets : RENO , Dr.php , ! BaD BoY ! , Gov.HaCkEr , Mind , AnTi SeCuRe Script HomePage:...

CVE-2010-2334: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in themes/default/download.php in Yamamah Photo Gallery 1.00, as distributed before 20100618, allows remote attackers to read arbitrary files via a .. dot dot in the download parameter...

CVE-2008-6403: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in themes/default/include/html/insert.inc.php in OpenRat 0.8-beta4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tpldir parameter...

CVE-2008-5922: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Cant Find A Gaming CMS CFAGCMS 1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 main and 2 right parameters...