6 matches found
GHSA-C8C8-9472-W52H Django Cross-site scripting Vulnerability
Cross-site scripting XSS vulnerability in the dismissChangeRelatedObjectPopup function in contrib/admin/static/admin/js/admin/RelatedObjectLookups.js in Django before 1.8.14, 1.9.x before 1.9.8, and 1.10.x before 1.10rc1 allows remote attackers to inject arbitrary web script or HTML via vectors...
CVE-2019-8926
An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zone /netflow/jspui/popup1.jsp file via these GET parameters: bussAlert, customDev, and selSource...
django: XSS in admin's add/change related popup
A cross-site scripting XSS flaw was found in Django. An attacker could exploit the unsafe usage of JavaScript's Element.innerHTML to forge content in the admin's add/change related pop-up. Element.textContent is now used to prevent XSS data execution...
django: XSS in admin's add/change related popup
A cross-site scripting XSS flaw was found in Django. An attacker could exploit the unsafe usage of JavaScript's Element.innerHTML to forge content in the admin's add/change related pop-up. Element.textContent is now used to prevent XSS data execution...
USN-3039-1 python-django vulnerability
It was discovered that Django incorrectly handled the admin's add/change related popup. A remote attacker could possibly use this issue to perform a cross-site scripting attack...
Betsy CMS versions <= 3.5 - Local File Inclusion Vulnerability
No description provided by source. / Author : MizoZ from MA Group : EvilWay Email : mizozxatgmaildotcom Greetz : Zuka !! Good luck DZ : / The vulnerability is in the file admin/popup.php on the get $GET'popup' Exploit : HOST/PATH/admin/popup.php?popup=IT INCLUDE FROM admin/...