7613 matches found
PYSEC-2022-43061
A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photodetail.html of the component Default Template Handler. The manipulation of the argument object.caption...
CVE-2022-4526 django-photologue Default Template photo_detail.html cross site scripting
A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photodetail.html of the component Default Template Handler. The manipulation of the argument object.caption...
PT-2022-27451 · Unknown · Django-Photologue
Name of the Vulnerable Software and Affected Versions: django-photologue versions up to 3.15.1 Description: A vulnerability was found in the Default Template Handler component, specifically in the file photologue/templates/photologue/photo detail.html. The manipulation of the object.caption...
CVE-2022-4526 django-photologue Default Template photo_detail.html cross site scripting
A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photodetail.html of the component Default Template Handler. The manipulation of the argument object.caption...
CVE-2022-4526
The CVE-2022-4526 issue affects django-photologue versions up to 3.15.1. Affected code in photologue/templates/photologue/photo_detail.html, within the Default Template Handler, allows manipulation of the caption parameter (object.caption) to trigger cross-site scripting (XSS). The vulnerability ...
Django-photologue 跨站脚本漏洞
Django-photologue is a powerful image management and gallery application for the Django web framework by Richard Barran, an individual developer. A security vulnerability exists in Django-photologue versions prior to 3.15.1, which stems from some unknown functionality in the Default Template...
py-django-photologue -- XSS vulnerability
domiee13 reports: A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photodetail.html of the component Default Template Handler. The manipulation of the argumen...
CVE-2022-4526 django-photologue Default Template photo_detail.html cross site scripting
A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photodetail.html of the component Default Template Handler. The manipulation of the argument object.caption...
django: Denial-of-service possibility in file uploads
A flaw was found in Django. The issue occurs when passing certain inputs to multipart forms, resulting in an infinite loop when parsing files...
django: Possible XSS via '{% debug %}' template tag
A flaw was found in Django. The % debug % template tag did not properly encode the current context, posing a Cross-site scripting attack vector XSS...
Django: SQL injection in QuerySet.annotate(),aggregate() and extra()
A flaw was found in the Django package, which leads to a SQL injection. This flaw allows an attacker using a crafted dictionary containing malicious SQL queries to compromise the database completely...
django: Possible XSS via '{% debug %}' template tag
A flaw was found in Django. The % debug % template tag did not properly encode the current context, posing a Cross-site scripting attack vector XSS...
django: Denial-of-service possibility in file uploads
A flaw was found in Django. The issue occurs when passing certain inputs to multipart forms, resulting in an infinite loop when parsing files...
Low: Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.4 (python-django-horizon) security update
An update for python-django-horizon is now available for Red Hat OpenStack Platform 16.2.4 Train on Red Hat Enterprise Linux RHEL 8.4. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
DJRCE
Django RCEDJRCE Simple django rce exploitation with leaked...
Debian: Security Advisory (DLA-3177-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-3191-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 3191-1] python-django security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3191-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb November 17, 2022 https://wiki.debian.org/LTS -...
Debian dla-3191 : python-django - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3191 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3191-1 [email protected]...