Lucene search
K

6 matches found

OSV
OSV
added 2022/05/14 2:46 a.m.0 views

GHSA-C8C8-9472-W52H Django Cross-site scripting Vulnerability

Cross-site scripting XSS vulnerability in the dismissChangeRelatedObjectPopup function in contrib/admin/static/admin/js/admin/RelatedObjectLookups.js in Django before 1.8.14, 1.9.x before 1.9.8, and 1.10.x before 1.10rc1 allows remote attackers to inject arbitrary web script or HTML via vectors...

6.1CVSS6.8AI score0.16367EPSS
Exploits6References21
OSV
OSV
added 2019/05/17 2:29 p.m.1 views

CVE-2019-8926

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zone /netflow/jspui/popup1.jsp file via these GET parameters: bussAlert, customDev, and selSource...

6.1CVSS6.4AI score0.0165EPSS
Exploits5References4
RedHat Linux
RedHat Linux
added 2016/08/11 1:23 a.m.2 views

django: XSS in admin's add/change related popup

A cross-site scripting XSS flaw was found in Django. An attacker could exploit the unsafe usage of JavaScript's Element.innerHTML to forge content in the admin's add/change related pop-up. Element.textContent is now used to prevent XSS data execution...

6.1CVSS5.6AI score0.16367EPSS
Exploits6References4
RedHat Linux
RedHat Linux
added 2016/08/11 12:4 a.m.3 views

django: XSS in admin's add/change related popup

A cross-site scripting XSS flaw was found in Django. An attacker could exploit the unsafe usage of JavaScript's Element.innerHTML to forge content in the admin's add/change related pop-up. Element.textContent is now used to prevent XSS data execution...

6.1CVSS5.6AI score0.16367EPSS
Exploits6References4
OSV
OSV
added 2016/07/19 5:59 p.m.0 views

USN-3039-1 python-django vulnerability

It was discovered that Django incorrectly handled the admin's add/change related popup. A remote attacker could possibly use this issue to perform a cross-site scripting attack...

6.1CVSS6.7AI score0.16367EPSS
Exploits6References2
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.8 views

Betsy CMS versions <= 3.5 - Local File Inclusion Vulnerability

No description provided by source. / Author : MizoZ from MA Group : EvilWay Email : mizozxatgmaildotcom Greetz : Zuka !! Good luck DZ : / The vulnerability is in the file admin/popup.php on the get $GET'popup' Exploit : HOST/PATH/admin/popup.php?popup=IT INCLUDE FROM admin/...

7.1AI score
Exploits0
Rows per page
Query Builder