PT-2011-4707

Name of the Vulnerable Software and Affected Versions Website Baker version 2.8.1 Description The issue allows remote attackers to obtain sensitive information via a direct request to certain .php files, which reveals the installation path in an error message. This can be demonstrated by accessin...

Django Directory Traversal Vulnerability (Linux)

This host has Django installed and is prone to Directory Traversal Vulnerability. OpenVAS Vulnerability Test $Id: gbdjangodirtraversalvulnlin.nasl 5904 2017-04-10 06:18:08Z teissa $ Django Directory Traversal Vulnerability Linux Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks...

Directory traversal

The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a crafted URL...

DEBIAN-CVE-2009-2659

The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a crafted URL...

CVE-2009-2659

The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a crafted URL...

CVE-2009-2659

The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a crafted URL...

CVE-2009-2659

CVE-2009-2659 affects the Django Admin media handler in core/servers/basehttp.py for Django 1.0 and 0.96. The vulnerability arises from improper mapping of URL requests to static media files, enabling directory traversal and reading arbitrary files via a crafted URL. Descriptions in connected rec...

CVE-2009-2659

The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a crafted URL...