Remote Code Executon vulnerability in Halo 0.4.3 via the remoteAddr and themeName parameters.
halo halo 0.4.3