PYSEC-2008-1

Cross-site scripting XSS vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the URI of a certain previous request...

CVE-2008-2302

Cross-site scripting XSS vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the URI of a certain previous request...

CVE-2008-2302

Cross-site scripting XSS vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the URI of a certain previous request...

CVE-2008-2302

The CVE-2008-2302 issue is a cross-site scripting (XSS) vulnerability in Django’s admin login form. Affected products/versions: Django 0.91 before 0.91.2, Django 0.95 before 0.95.3, and Django 0.96 before 0.96.2. The vulnerability allows remote attackers to inject arbitrary script/HTML via the UR...

Fedora 8 : Django-0.96.2-1.fc8 (2008-4248)

Bug 446402 - CVE-2008-2302 Django: administration application XSS Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 7 : Django-0.96.2-1.fc7 (2008-4191)

Mon May 19 2008 Michel Salim - 0.96.2-1 - XSS security update: CVE-2008-2302 bz 442757-60 - Sat Apr 5 2008 Michel Salim - 0.96.1-2 - Package .egg-info file on Fedora = 9 - Thu Nov 1 2007 Michel Salim 0.96.1-1 - i18n security update: CVE-2007-5712, bz357051 Note that Tenable Network Security has...

Fedora 9 : Django-0.96.2-1.fc9 (2008-4267)

Mon May 19 2008 Michel Salim - 0.96.2-1 - XSS security update: CVE-2008-2302 bz 442757-60 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

[SECURITY] Fedora 9 Update: Django-0.96.2-1.fc9

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

[SECURITY] Fedora 8 Update: Django-0.96.2-1.fc8

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

[SECURITY] Fedora 7 Update: Django-0.96.2-1.fc7

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

FreeBSD : django -- XSS vulnerability (f49ba347-2190-11dd-907c-001c2514716c)

Django project reports : The Django administration application will, when accessed by a user who is not sufficiently authenticated, display a login form and ask the user to provide the necessary credentials before displaying the requested page. This form will be submitted to the URL the user...

Django Administration Application Login Form XSS

The remote host is using Django, a high-level Python web framework designed for rapid development of database-driven websites. The administration application included with the version of Django installed on the remote host fails to sanitize the URL before using it to generate dynamic HTML output...

django -- XSS vulnerability

Django project reports: The Django administration application will, when accessed by a user who is not sufficiently authenticated, display a login form and ask the user to provide the necessary credentials before displaying the requested page. This form will be submitted to the URL the user...

Fedora 8 : Django-0.96.1-1.fc8 (2007-2788)

Bug 362771 - CVE-2007-5712 Django 0.96 i18n DoS F8 - Bug 357051 - CVE-2007-5712 Django 0.96 i18n DoS - CVE-2007-5712 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...

Fedora 7 : Django-0.96.1-1.fc7 (2007-3157)

Thu Nov 1 2007 Michel Salim 0.96.1-1 - i18n security update: CVE-2007-5712, bz357051 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

[SECURITY] Fedora 7 Update: Django-0.96.1-1.fc7

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

[SECURITY] Fedora 8 Update: Django-0.96.1-1.fc8

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

CVE-2007-5828

Cross-site request forgery CSRF vulnerability in the admin panel in Django 0.96 allows remote attackers to change passwords of arbitrary users via a request to admin/auth/user/1/password/. NOTE: this issue has been disputed by Debian, since product documentation includes a recommendation for a CS...

DEBIAN-CVE-2007-5828

Cross-site request forgery CSRF vulnerability in the admin panel in Django 0.96 allows remote attackers to change passwords of arbitrary users via a request to admin/auth/user/1/password/. NOTE: this issue has been disputed by Debian, since product documentation includes a recommendation for a CS...

CVE-2007-5828

Cross-site request forgery CSRF vulnerability in the admin panel in Django 0.96 allows remote attackers to change passwords of arbitrary users via a request to admin/auth/user/1/password/. NOTE: this issue has been disputed by Debian, since product documentation includes a recommendation for a CS...