Sql injection

2015-01-1616:59:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

Low

0.027 Low

EPSS

Percentile

90.5%

JSON

ModelMultipleChoiceField in Django 1.6.x before 1.6.10 and 1.7.x before 1.7.3, when show_hidden_initial is set to True, allows remote attackers to cause a denial of service by submitting duplicate values, which triggers a large number of SQL queries.

CPENameOperatorVersion
ubuntu_linuxeq12.4 lts
ubuntu_linuxeq14.10
ubuntu_linuxeq14.04
ubuntu_linuxeq10.4 lts
djangole1.4.17
djangoeq1.6.7
djangoeq1.6.5
djangoeq1.6.8
djangoeq1.6.6
djangoeq1.7.2

Name	Operator	Version
ubuntu_linux	eq	12.4 lts
ubuntu_linux	eq	14.10
ubuntu_linux	eq	14.04
ubuntu_linux	eq	10.4 lts
django	le	1.4.17
django	eq	1.6.7
django	eq	1.6.5
django	eq	1.6.8
django	eq	1.6.6
django	eq	1.7.2