7639 matches found
GHSA-PG2F-R7PC-6FXX Cross-Site Request Forgery in MicroPyramid Django CRM
Multiple CSRF issues exist in MicroPyramid Django CRM 0.2.1 via /change-password-by-admin/, /api/settings/add/, /cases/create/, /change-password-by-admin/, /comment/add/, /documents/1/view/, /documents/create/, /opportunities/create/, and /login/...
SUSE-SU-2019:2257-1 Security update for python-Django
This update for python-Django to version 1.11.23 fixes the following issues: - CVE-2019-14232: Fixed a denial of service in 'django.utils.text.Truncator' bsc1142880. - CVE-2019-14233: Fixed a denial of service in striptags bsc1142882. - CVE-2019-14234: Fixed an SQL injection in key and index...
Cross-Site Request Forgery (CSRF)
django-crm is vulnerable to cross-site request forgery CSRF. The server does not verify the authenticity of requests and allows a remote attacker to submit requests on behalf of the users when users are tricked into visiting a malicious web page...
Cross-site Scripting in django-js-reverse
django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...
GHSA-VX6V-2RG6-865H Cross-site Scripting in django-js-reverse
django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...
CVE-2019-11457
Multiple CSRF issues exist in MicroPyramid Django CRM 0.2.1 via /change-password-by-admin/, /api/settings/add/, /cases/create/, /change-password-by-admin/, /comment/add/, /documents/1/view/, /documents/create/, /opportunities/create/, and /login/...
CVE-2019-11457
Multiple CSRF issues exist in MicroPyramid Django CRM 0.2.1 via /change-password-by-admin/, /api/settings/add/, /cases/create/, /change-password-by-admin/, /comment/add/, /documents/1/view/, /documents/create/, /opportunities/create/, and /login/...
PYSEC-2019-174
Multiple CSRF issues exist in MicroPyramid Django CRM 0.2.1 via /change-password-by-admin/, /api/settings/add/, /cases/create/, /change-password-by-admin/, /comment/add/, /documents/1/view/, /documents/create/, /opportunities/create/, and /login/...
PYSEC-2019-174
Multiple CSRF issues exist in MicroPyramid Django CRM 0.2.1 via /change-password-by-admin/, /api/settings/add/, /cases/create/, /change-password-by-admin/, /comment/add/, /documents/1/view/, /documents/create/, /opportunities/create/, and /login/...
Cross site request forgery (csrf)
Multiple CSRF issues exist in MicroPyramid Django CRM 0.2.1 via /change-password-by-admin/, /api/settings/add/, /cases/create/, /change-password-by-admin/, /comment/add/, /documents/1/view/, /documents/create/, /opportunities/create/, and /login/...
CVE-2019-11457
CVE-2019-11457 : The connected Red Hat, OSV and related advisories corroborate multiple CSRF issues in MicroPyramid Django CRM 0.2.1. Affected endpoints include /change-password-by-admin/, /api/settings/add/, /cases/create/, /comment/add/, /documents/1/view/, /documents/create/, /opportunities/cr...
CVE-2019-11457
Multiple CSRF issues exist in MicroPyramid Django CRM 0.2.1 via /change-password-by-admin/, /api/settings/add/, /cases/create/, /change-password-by-admin/, /comment/add/, /documents/1/view/, /documents/create/, /opportunities/create/, and /login/...
django-js-reverse cross-site scripting vulnerability
django-js-reverse is a Django application for handling URL naming. A cross-site scripting vulnerability exists in versions prior to django-js-reverse 0.9.1, which can be exploited by an attacker to execute client-side code...
Cross-site Scripting (XSS)
django-js-reverse is vulnerable to cross-site scripting XSS. The attack is possible because it does not escape the entities via jsreverseinline...
Django CRM 0.2.1 Cross Site Request Forgery Vulnerability
Exploit for php platform in category web applications Information -------------------- Advisory by Netsparker Name: Multiple CSRF Vulnerabilities in Django CRM 0.2.1 Affected Software: Django CRM Affected Versions: 0.2.1 Homepage: https://github.com/MicroPyramid/Django-CRM Vulnerability: Cross-si...
MicroPyramid Django CRM CVE-2019-11457 Multiple Cross Site Request Forgery Vulnerabilities
Description MicroPyramid Django CRM is prone to multiple cross-site request-forgery vulnerabilities. Exploiting these issues may allow a remote attacker to perform certain unauthorized actions in the context of the affected application. MicroPyramid Django CRM version 0.2.1 is vulnerable...
Django CRM 0.2.1 Cross Site Request Forgery
Information -------------------- Advisory by Netsparker Name: Multiple CSRF Vulnerabilities in Django CRM 0.2.1 Affected Software: Django CRM Affected Versions: 0.2.1 Homepage: https://github.com/MicroPyramid/Django-CRM Vulnerability: Cross-site Request Forgery Severity: 8.8 High Status: Not Fixe...
CVE-2019-15486
django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...