Lucene search
HistoryMay 23, 2008 - 3:32 p.m.
CVE-2008-2302
cve
2008
2302
cross-site scripting
xss
vulnerability
django
administration
remote attackers
web script
html
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.3 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
67.9%
Cross-site scripting (XSS) vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the URI of a certain previous request.
Affected configurations
Node
django_projectdjangoMatch0.91
ORdjango_projectdjangoMatch0.95
ORdjango_projectdjangoMatch0.96
Related
freebsd
freebsd
django -- XSS vulnerability
2008-05-10 00:00:00
openvas
openvas
Fedora Update for Django FEDORA-2008-4267
2009-02-17 00:00:00
Fedora Update for Django FEDORA-2008-7672
2009-02-17 00:00:00
FreeBSD Ports: py23-django, py24-django, py25-django
2008-09-04 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: Django-0.96.2-1.fc9
2008-05-21 11:06:46
[SECURITY] Fedora 9 Update: Django-0.96.3-1.fc9
2008-09-10 06:40:54
[SECURITY] Fedora 8 Update: Django-0.96.2-1.fc8
2008-05-21 11:04:20
osv
osv
PYSEC-2008-1
2008-05-23 15:32:00
Django Cross-site scripting (XSS) vulnerability
2022-05-01 23:48:43
github
github
Django Cross-site scripting (XSS) vulnerability
2022-05-01 23:48:43
cvelist
cvelist
CVE-2008-2302
2008-05-23 15:00:00
nessus
nessus
Django Administration Application Login Form XSS
2008-05-15 00:00:00
Fedora 8 : Django-0.96.2-1.fc8 (2008-4248)
2008-05-22 00:00:00
Fedora 9 : Django-0.96.2-1.fc9 (2008-4267)
2008-05-22 00:00:00
nvd
nvd
CVE-2008-2302
2008-05-23 15:32:00
gitlab
gitlab
ubuntucve
ubuntucve
CVE-2008-2302
2008-05-23 00:00:00
debiancve
debiancve
CVE-2008-2302
2008-05-23 15:32:00
prion
prion
Cross site scripting
2008-05-23 15:32:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.3 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
67.9%
Related for CVE-2008-2302