Fedora 24 : python-django (2016-b7e31a0b9a)

fix CVE-2016-6186 rhbz1357701 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...

Ubuntu: Security Advisory (USN-3039-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

django CMS 3.3.0 - (Editor, Snippet) stored XSS

No description provided by source...

Django CMS 'Groups' HTML Injection Vulnerability

Django CMS is Django Software Foundation of a set of open source based on the Django framework for content management systems . Django CMS suffers from an HTML injection vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be...

python-django: cross-site scripting

Unsafe usage of JavaScript's Element.innerHTML could result in XSS in the admin's add/change related popup. Element.textContent is now used to prevent execution of the data. The debug view also used innerHTML. Although a security issue wasn't identified there, out of an abundance of caution it's...

Debian DLA-555-1 : python-django security update

It was discovered that Django, a high-level Python web development framework, is prone to a cross-site scripting vulnerability in the admin's add/change related popup and debug view. For Debian 7 'Wheezy', these problems have been fixed in version 1.4.5-1+deb7u17. We recommend that you upgrade yo...

python2-django: cross-site scripting

Unsafe usage of JavaScript's Element.innerHTML could result in XSS in the admin's add/change related popup. Element.textContent is now used to prevent execution of the data. The debug view also used innerHTML. Although a security issue wasn't identified there, out of an abundance of caution it's...

[SECURITY] [DLA 555-1] python-django security update

Package : python-django Version : 1.4.5-1+deb7u17 CVE ID : CVE-2016-6186 Debian Bug : 831799 It was discovered that Django, a high-level Python web development framework, is prone to a cross-site scripting vulnerability in the admins add/change related popup and debug view. For Debian 7 "Wheezy",...

python-django cross-site scripting vulnerability

Django is the open source Python Web application development framework. A security vulnerability exists in Django incorrectly handling administrator add/change related popups. A remote attacker could exploit this vulnerability to perform cross-site scripting attacks...

DLA-555-1 python-django - security update

Bulletin has no description...

Django CMS 3.3.0 - Editor Snippet Persistent Cross-Site Scripting

Document Title: =============== Django CMS v3.3.0 - Editor Snippet Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1869 Security Release: https://www.djangoproject.com/weblog/2016/jul/18/security-releases/...

Django CMS 3.3.0 - (Editor Snippet) Persistent Cross-Site Scripting

Exploit for php platform in category web applications Document Title: =============== Django CMS v3.3.0 - Editor Snippet Persistent Web Vulnerability Security Release: https://www.djangoproject.com/weblog/2016/jul/18/security-releases/ http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6186...

Django CMS 3.3.0 - Editor Snippet Persistent Cross-Site Scripting

Django CMS 3.3.0 - Editor Snippet Persistent Cross-Site Scripting Document Title: =============== Django CMS v3.3.0 - Editor Snippet Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1869 Security Release:...

Ubuntu 16.04 LTS : Django vulnerability (USN-3039-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3039-1 advisory. It was discovered that Django incorrectly handled the admin's add/change related popup. A remote attacker could possibly use this issue to perform a cross-site...

USN-3039-1 python-django vulnerability

It was discovered that Django incorrectly handled the admin's add/change related popup. A remote attacker could possibly use this issue to perform a cross-site scripting attack...

USN-3039-1: Django vulnerability

It was discovered that Django incorrectly handled the admin's add/change related popup. A remote attacker could possibly use this issue to perform a cross-site scripting attack...

CVE-2016-6186

A cross-site scripting XSS flaw was found in Django. An attacker could exploit the unsafe usage of JavaScript's Element.innerHTML to forge content in the admin's add/change related pop-up. Element.textContent is now used to prevent XSS data execution...

Debian DSA-3622-1 : python-django - security update

It was discovered that Django, a high-level Python web development framework, is prone to a cross-site scripting vulnerability in the admin's add/change related popup. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Django CMS v3.3.0 - (Editor Snippet) Persistent Vulnerability

Document Title: =============== Django CMS v3.3.0 - Editor Snippet Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1869 Security Release: https://www.djangoproject.com/weblog/2016/jul/18/security-releases/...

Django 3.3.0 Script Insertion

Document Title: =============== Django CMS v3.3.0 - Editor Snippet Persistent Web Vulnerability CVE-2016-6186 References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1869 Security Release: https://www.djangoproject.com/weblog/2016/jul/18/security-releases/...