71 matches found
Django CMS v3.3.0 - (Editor Snippet) Persistent Vulnerability
Document Title: =============== Django CMS v3.3.0 - Editor Snippet Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1869 Security Release: https://www.djangoproject.com/weblog/2016/jul/18/security-releases/...
Django CMS v3.3.0 - (Editor Snippet) Persistent Vulnerability
Document Title: =============== Django CMS v3.3.0 - Editor Snippet Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1869 Security Release: https://www.djangoproject.com/weblog/2016/jul/18/security-releases/...
Django CMS 3.2.3 Cross Site Scripting
Document Title: =============== Django CMS v3.2.3 - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1820 Release Date: ============= 2016-04-19 Vulnerability Laboratory ID VL-ID: ==================================...
Django CMS v3.2.3 - Filter Bypass & Persistent Vulnerability
Document Title: =============== Django CMS v3.2.3 - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1820 Release Date: ============= 2016-04-19 Vulnerability Laboratory ID VL-ID: ==================================...
Django CMS v3.2.3 - Filter Bypass & Persistent Vulnerability
Document Title: =============== Django CMS v3.2.3 - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1820 Release Date: ============= 2016-04-18 Vulnerability Laboratory ID VL-ID: ==================================...
Django CMS 3.2.3 Filter Bypass / Script Insertion
Document Title: =============== Django CMS v3.2.3 - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1821 Release Date: ============= 2016-04-14 Vulnerability Laboratory ID VL-ID: ==================================...
Django CMS v3.2.3 - Filter Bypass & Persistent Vulnerability
Document Title: =============== Django CMS v3.2.3 - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1821 Release Date: ============= 2016-04-14 Vulnerability Laboratory ID VL-ID: ==================================...
Django CMS v3.2.3 - Filter Bypass & Persistent Vulnerability
Document Title: =============== Django CMS v3.2.3 - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1821 Release Date: ============= 2016-04-13 Vulnerability Laboratory ID VL-ID: ==================================...
django CMS 'page_attribute' Template HTML 注入漏洞
BUGTRAQ ID: 57559 django CMS是用pony作为技术支持的CMS,可以前端编辑。 django CMS 2.3.5 之前版本的pageattribute模板标签没有正确过滤,在实现上存在HTML注入漏洞,成功利用后可允许在受影响浏览器中执行HTML和脚本代码。 0 django CMS 2.x 厂商补丁: django CMS ---------- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载2.3.5版本: https://www.django-cms.org/en/...
FreeBSD : django-cms -- XSS Vulnerability (3886cafe-668c-11e2-94b8-1c4bd681f0cf)
Cross-site scripting XSS vulnerability Jonas Obrist reports: The security issue allows users with limited admin access to elevate their privileges through XSS injection using the pageattribute template tag. Only users with admin access and the permission to edit at least one django CMS page objec...
django-cms -- XSS Vulnerability
Cross-site scripting XSS vulnerability Jonas Obrist reports: The security issue allows users with limited admin access to elevate their privileges through XSS injection using the pageattribute template tag. Only users with admin access and the permission to edit at least one django CMS page objec...