Lucene search
+L

7681 matches found

PyPA
PyPA
added 2008/05/23 3:32 p.m.15 views

PYSEC-2008-1

Cross-site scripting XSS vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the URI of a certain previous request...

4.3CVSS6AI score0.01323EPSS
SaveExploits0References8Affected Software1
Prion
Prion
added 2008/05/23 3:32 p.m.11 views

Cross site scripting

Cross-site scripting XSS vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the URI of a certain previous request...

4.3CVSS6AI score0.01323EPSS
SaveExploits0References7Affected Software1
UbuntuCve
UbuntuCve
added 2008/05/23 3:32 p.m.23 views

CVE-2008-2302

Cross-site scripting XSS vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the URI of a certain previous request...

4.3CVSS5.9AI score0.01323EPSS
SaveExploits0References1
OSV
OSV
added 2008/05/23 3:32 p.m.4 views

DEBIAN-CVE-2008-2302

Cross-site scripting XSS vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the URI of a certain previous request...

4.3CVSS5.7AI score0.01323EPSS
SaveExploits0References1
OSV
OSV
added 2008/05/23 3:32 p.m.22 views

PYSEC-2008-1

Cross-site scripting XSS vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the URI of a certain previous request...

4.3CVSS4.4AI score0.01323EPSS
SaveExploits0References8
Debian CVE
Debian CVE
added 2008/05/23 3:00 p.m.55 views

CVE-2008-2302

Cross-site scripting XSS vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the URI of a certain previous request...

4.3CVSS5.5AI score0.01323EPSS
SaveExploits0
Cvelist
Cvelist
added 2008/05/23 3:00 p.m.41 views

CVE-2008-2302

Cross-site scripting XSS vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the URI of a certain previous request...

5.4AI score0.01323EPSS
SaveExploits0References7
CVE
CVE
added 2008/05/23 3:00 p.m.82 views

CVE-2008-2302

The CVE-2008-2302 issue is a cross-site scripting (XSS) vulnerability in Django’s admin login form. Affected products/versions: Django 0.91 before 0.91.2, Django 0.95 before 0.95.3, and Django 0.96 before 0.96.2. The vulnerability allows remote attackers to inject arbitrary script/HTML via the UR...

4.3CVSS5.3AI score0.01323EPSS
SaveExploits0References7Affected Software1
Tenable Nessus
Tenable Nessus
added 2008/05/22 12:00 a.m.32 views

Fedora 8 : Django-0.96.2-1.fc8 (2008-4248)

Bug 446402 - CVE-2008-2302 Django: administration application XSS Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

4.3CVSS5.3AI score0.01323EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2008/05/22 12:00 a.m.19 views

Fedora 7 : Django-0.96.2-1.fc7 (2008-4191)

Mon May 19 2008 Michel Salim - 0.96.2-1 - XSS security update: CVE-2008-2302 bz 442757-60 - Sat Apr 5 2008 Michel Salim - 0.96.1-2 - Package .egg-info file on Fedora = 9 - Thu Nov 1 2007 Michel Salim 0.96.1-1 - i18n security update: CVE-2007-5712, bz357051 Note that Tenable Network Security has...

4.3CVSS5.3AI score0.01814EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2008/05/22 12:00 a.m.22 views

Fedora 9 : Django-0.96.2-1.fc9 (2008-4267)

Mon May 19 2008 Michel Salim - 0.96.2-1 - XSS security update: CVE-2008-2302 bz 442757-60 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

4.3CVSS5.3AI score0.01323EPSS
SaveExploits0References3
Fedora
Fedora
added 2008/05/21 11:06 a.m.38 views

[SECURITY] Fedora 9 Update: Django-0.96.2-1.fc9

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

4.3CVSS1.6AI score0.01323EPSS
SaveExploits0
Fedora
Fedora
added 2008/05/21 11:04 a.m.25 views

[SECURITY] Fedora 8 Update: Django-0.96.2-1.fc8

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

4.3CVSS1.6AI score0.01323EPSS
SaveExploits0
Fedora
Fedora
added 2008/05/21 10:57 a.m.31 views

[SECURITY] Fedora 7 Update: Django-0.96.2-1.fc7

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

4.3CVSS1.6AI score0.01814EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2008/05/16 12:00 a.m.24 views

FreeBSD : django -- XSS vulnerability (f49ba347-2190-11dd-907c-001c2514716c)

Django project reports : The Django administration application will, when accessed by a user who is not sufficiently authenticated, display a login form and ask the user to provide the necessary credentials before displaying the requested page. This form will be submitted to the URL the user...

4.3CVSS5AI score0.01323EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2008/05/15 12:00 a.m.506 views

Django Administration Application Login Form XSS

The remote host is using Django, a high-level Python web framework designed for rapid development of database-driven websites. The administration application included with the version of Django installed on the remote host fails to sanitize the URL before using it to generate dynamic HTML output...

4.3CVSS5.8AI score0.01323EPSS
SaveExploits0References2
FreeBSD
FreeBSD
added 2008/05/10 12:00 a.m.31 views

django -- XSS vulnerability

Django project reports: The Django administration application will, when accessed by a user who is not sufficiently authenticated, display a login form and ask the user to provide the necessary credentials before displaying the requested page. This form will be submitted to the URL the user...

4.3CVSS5.5AI score0.01323EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2007/11/12 12:00 a.m.24 views

Fedora 8 : Django-0.96.1-1.fc8 (2007-2788)

Bug 362771 - CVE-2007-5712 Django 0.96 i18n DoS F8 - Bug 357051 - CVE-2007-5712 Django 0.96 i18n DoS - CVE-2007-5712 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...

2.6CVSS5.3AI score0.01814EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2007/11/12 12:00 a.m.27 views

Fedora 7 : Django-0.96.1-1.fc7 (2007-3157)

Thu Nov 1 2007 Michel Salim 0.96.1-1 - i18n security update: CVE-2007-5712, bz357051 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

2.6CVSS5.3AI score0.01814EPSS
SaveExploits0References4
Fedora
Fedora
added 2007/11/09 11:58 p.m.45 views

[SECURITY] Fedora 7 Update: Django-0.96.1-1.fc7

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

2.6CVSS1.6AI score0.01814EPSS
SaveExploits0
Rows per page
Query Builder