7681 matches found
Django admin list filter data extraction / leakage
ADVISORY INFORMATION: Advisory ID: NGENUITY-2010-009 Date discovered: 8.28.2010 Date published: 12.22.2010 SOFTWARE AFFECTED: “Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design.” 1 The admin interface of the Django web framework can be abuse...
Django Admin List Filter Data Extraction
ADVISORY INFORMATION: Advisory ID: NGENUITY-2010-009 Date discovered: 8.28.2010 Date published: 12.22.2010 SOFTWARE AFFECTED: Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. 1 The admin interface of the Django web framework can be abuse...
CVE-2010-4535
The password reset functionality in django.contrib.auth in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not validate the length of a string representing a base36 timestamp, which allows remote attackers to cause a denial of service resource consumption via a URL that...
django -- multiple vulnerabilities
Django project reports: Today the Django team is issuing multiple releases -- Django 1.2.4, Django 1.1.3 and Django 1.3 beta 1 -- to remedy two security issues reported to us. All users of affected versions of Django are urged to upgrade immediately. Information leakage in Django administrative...
CVE-2010-4534
The administrative interface in django.contrib.admin in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not properly restrict use of the query string to perform certain object filtering, which allows remote authenticated users to obtain sensitive information via a series...
Fedora Update for Django FEDORA-2010-14745
Check for the Version of Django OpenVAS Vulnerability Test Fedora Update for Django FEDORA-2010-14745 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
Fedora Update for Django FEDORA-2010-14745
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Ubuntu Update for python-django vulnerability USN-1004-1
Ubuntu Update for Linux kernel vulnerabilities USN-1004-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10041.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for python-django vulnerability USN-1004-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...
Ubuntu: Security Advisory (USN-1004-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[USN-1004-1] Django vulnerability
=========================================================== Ubuntu Security Notice USN-1004-1 October 13, 2010 python-django vulnerability CVE-2010-3082 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 10.10 This advisory...
Ubuntu 10.10 : python-django vulnerability (USN-1004-1)
It was discovered that Django did not properly sanitize the cookie value when applying CSRF protections resulting in a cross-site scripting XSS vulnerability. With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a remote...
USN-1004-1: Django vulnerability
It was discovered that Django did not properly sanitize the cookie value when applying CSRF protections resulting in a cross-site scripting XSS vulnerability. With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a remote...
django -- cross-site scripting vulnerability
The remote host is missing an update to the system as announced in the referenced advisory. VID 3ff95dd3-c291-11df-b0dc-00215c6a37bb OpenVAS Vulnerability Test $ Description: Auto generated from VID 3ff95dd3-c291-11df-b0dc-00215c6a37bb Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...
django -- cross-site scripting vulnerability
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Fedora 14 : Django-1.2.3-1.fc14 (2010-14745)
' Today the Django team has released Django 1.2.3, which remedies several issues with the recent 1.2.2 package. This package corrects the following problems : - The patch applied for the security issue covered in Django 1.2.2 caused issues with non-ASCII responses using CSRF tokens. This has been...
[SECURITY] Fedora 14 Update: Django-1.2.3-1.fc14
Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...
FreeBSD : django -- XSS vulnerability (3ff95dd3-c291-11df-b0dc-00215c6a37bb)
Django project reports : The provided template tag for inserting the CSRF token into forms -- % csrftoken % -- explicitly trusts the cookie value, and displays it as-is. Thus, an attacker who is able to tamper with the value of the CSRF cookie can cause arbitrary content to be inserted, unescaped...
DEBIAN-CVE-2010-3082
Cross-site scripting XSS vulnerability in Django 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via a csrfmiddlewaretoken aka csrftoken cookie...
