django-zero (0.0.1), farmdrop (>=0.2.0, <=1.1.0.dev2) +6 more potentially affected by CVE-2021-30459 via django-debug-toolbar (>=1.4.0, <=1.9.1)

django-debug-toolbar PYPI version =1.4.0, =0.2.0, =3.1.1, =0.1.0a0, =0.6.0, =1.0.0, =3.4.0 Source cves: CVE-2021-30459 Source advisory: GHSA-PGHF-347X-C2GJ...

mc4ep-lavender (>=0.8.0, <=0.17.0), muses-lpdp (>=0.2.2, <=0.4.0rc1590080566) +2 more potentially affected by CVE-2021-30459 via django-debug-toolbar (>=2.1.0, <=2.2.0)

django-debug-toolbar PYPI version =2.1.0, =0.8.0, =0.2.2, =0.1.2, =0.1.6 Source cves: CVE-2021-30459 Source advisory: OSV:GHSA-PGHF-347X-C2GJ...

mc4ep-lavender (>=0.8.0, <=0.17.0), muses-lpdp (>=0.2.2, <=0.4.0rc1590080566) +2 more potentially affected by CVE-2021-30459 via django-debug-toolbar (>=2.1.0, <=2.2.0)

django-debug-toolbar PYPI version =2.1.0, =0.8.0, =0.2.2, =0.1.2, =0.1.6 Source cves: CVE-2021-30459 Source advisory: GHSA-PGHF-347X-C2GJ...

label-studio (>=1.1.0rc0, <=1.2.0), thenewboston-ml-dev (0.2.3) potentially affected by CVE-2021-30459 via django-debug-toolbar (3.2.0)

django-debug-toolbar PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-debug-toolbar and may be impacted: - label-studio =1.1.0rc0, =1.2.0 - thenewboston-ml-dev 0.2.3 Source cves: CVE-2021-30459 Source advisory:...

label-studio (>=1.1.0rc0, <=1.2.0), thenewboston-ml-dev (0.2.3) potentially affected by CVE-2021-30459 via django-debug-toolbar (3.2.0)

django-debug-toolbar PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-debug-toolbar and may be impacted: - label-studio =1.1.0rc0, =1.2.0 - thenewboston-ml-dev 0.2.3 Source cves: CVE-2021-30459 Source advisory: GHSA-PGHF-347X-C...

CVE-2021-30459

A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the rawsql input field of the SQL explain, analyze, or select form...

CVE-2021-30459

A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the rawsql input field of the SQL explain, analyze, or select form...

PYSEC-2021-10

A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the rawsql input field of the SQL explain, analyze, or select form...

Sql injection

A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the rawsql input field of the SQL explain, analyze, or select form...

CVE-2021-30459

A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the rawsql input field of the SQL explain, analyze, or select form...

PYSEC-2021-10

A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the rawsql input field of the SQL explain, analyze, or select form...

CVE-2021-30459

A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the rawsql input field of the SQL explain, analyze, or select form...

django-zero (0.0.1), farmdrop (>=0.2.0, <=1.1.0.dev2) +6 more potentially affected by CVE-2021-30459 via django-debug-toolbar (>=1.4.0, <=1.9.1)

django-debug-toolbar PYPI version =1.4.0, =0.2.0, =3.1.1, =0.1.0a0, =0.6.0, =1.0.0, =3.4.0 Source cves: CVE-2021-30459 Source advisory: MEND:CVE-2021-30459...

CVE-2021-30459

CVE-2021-30459 affects Django Debug Toolbar (Jazzband) with a SQL injection in the SQL Panel. The vulnerability allows attackers to execute arbitrary SQL by modifying the raw_sql input in the SQL explain, analyze, or select forms. Affected versions are Django Debug Toolbar before 1.11.1, 2.x befo...

CVE-2021-30459

A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the rawsql input field of the SQL explain, analyze, or select form...

CVE-2021-30459: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the rawsql input field of the SQL explain, analyze, or select form...

Django SQL注入漏洞

Django is the Django Foundation's set of open source Web application framework based on the Python language . The framework includes an object-oriented mapper, view system, template system, and more. An SQL injection vulnerability exists in Django Debug Toolbar, which can be exploited by an...

PT-2021-18736

Name of the Vulnerable Software and Affected Versions Django Debug Toolbar versions 1.x through 1.11.0 Django Debug Toolbar versions 2.x through 2.2.0 Django Debug Toolbar versions 3.x through 3.2.0 Description A SQL Injection issue in the SQL Panel allows attackers to execute SQL statements by...

Fedora 26 : php-symfony (2017-4fcbd8a4c3)

2.8.25 2017-07-17 - security 23507 Security validate empty passwords again xabbuh - bug 23526 HttpFoundation Set meta refresh time to 0 in RedirectResponse content jnvsor - bug 23540 Disable inlining deprecated services alekitto - bug 23468 DI Handle root namespace in service definitions ro0NL -...

Password Reset And Recovery

pagekit/pagekit is vulnerable to password reset and recovery. Attackers are able to reset a registered user's password when the debug toolbar is enabled. By doing this, attackers are able to recover the password...