python-django cross-site scripting vulnerability

Django is the open source Python Web application development framework. A security vulnerability exists in Django incorrectly handling administrator add/change related popups. A remote attacker could exploit this vulnerability to perform cross-site scripting attacks...

Django CMS 3.3.0 - (Editor Snippet) Persistent Cross-Site Scripting

Exploit for php platform in category web applications Document Title: =============== Django CMS v3.3.0 - Editor Snippet Persistent Web Vulnerability Security Release: https://www.djangoproject.com/weblog/2016/jul/18/security-releases/ http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6186...

Django CMS 3.3.0 - Editor Snippet Persistent Cross-Site Scripting

Document Title: =============== Django CMS v3.3.0 - Editor Snippet Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1869 Security Release: https://www.djangoproject.com/weblog/2016/jul/18/security-releases/...

Django CMS 3.3.0 - Editor Snippet Persistent Cross-Site Scripting

Django CMS 3.3.0 - Editor Snippet Persistent Cross-Site Scripting Document Title: =============== Django CMS v3.3.0 - Editor Snippet Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1869 Security Release:...

Ubuntu 16.04 LTS : Django vulnerability (USN-3039-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3039-1 advisory. It was discovered that Django incorrectly handled the admin's add/change related popup. A remote attacker could possibly use this issue to perform a cross-site...

USN-3039-1: Django vulnerability

It was discovered that Django incorrectly handled the admin's add/change related popup. A remote attacker could possibly use this issue to perform a cross-site scripting attack...

USN-3039-1 python-django vulnerability

It was discovered that Django incorrectly handled the admin's add/change related popup. A remote attacker could possibly use this issue to perform a cross-site scripting attack...

CVE-2016-6186

A cross-site scripting XSS flaw was found in Django. An attacker could exploit the unsafe usage of JavaScript's Element.innerHTML to forge content in the admin's add/change related pop-up. Element.textContent is now used to prevent XSS data execution...

Django 3.3.0 Script Insertion

Document Title: =============== Django CMS v3.3.0 - Editor Snippet Persistent Web Vulnerability CVE-2016-6186 References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1869 Security Release: https://www.djangoproject.com/weblog/2016/jul/18/security-releases/...

Django CMS v3.3.0 - (Editor Snippet) Persistent Vulnerability

Document Title: =============== Django CMS v3.3.0 - Editor Snippet Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1869 Security Release: https://www.djangoproject.com/weblog/2016/jul/18/security-releases/...

Debian DSA-3622-1 : python-django - security update

It was discovered that Django, a high-level Python web development framework, is prone to a cross-site scripting vulnerability in the admin's add/change related popup. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

[SECURITY] [DSA 3622-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3622-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 18, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3622-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3622-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 18, 2016 https://www.debian.org/security/faq -...

DSA-3622-1 python-django - security update

Bulletin has no description...

Debian Security Advisory DSA 3622-1 (python-django - security update)

It was discovered that Django, a high-level Python web development framework, is prone to a cross-site scripting vulnerability in the admin OpenVAS Vulnerability Test $Id: deb3622.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from advisory DSA 3622-1 using nvtgen 1.0 Script version: 1....

PT-2016-6791

Name of the Vulnerable Software and Affected Versions Django versions 1.8.0 through 1.8.13 Django versions 1.9.0 through 1.9.7 Django versions 1.10.0 through 1.10.0rc1 Description A cross-site scripting XSS issue exists in the dismissChangeRelatedObjectPopup function, allowing remote attackers to...

UBUNTU-CVE-2016-6186

Cross-site scripting XSS vulnerability in the dismissChangeRelatedObjectPopup function in contrib/admin/static/admin/js/admin/RelatedObjectLookups.js in Django before 1.8.14, 1.9.x before 1.9.8, and 1.10.x before 1.10rc1 allows remote attackers to inject arbitrary web script or HTML via vectors...

Django CMS v3.3.0 - (Editor Snippet) Persistent Vulnerability

Document Title: =============== Django CMS v3.3.0 - Editor Snippet Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1869 Security Release: https://www.djangoproject.com/weblog/2016/jul/18/security-releases/...

CVE-2016-6186

Cross-site scripting XSS vulnerability in the dismissChangeRelatedObjectPopup function in contrib/admin/static/admin/js/admin/RelatedObjectLookups.js in Django before 1.8.14, 1.9.x before 1.9.8, and 1.10.x before 1.10rc1 allows remote attackers to inject arbitrary web script or HTML via vectors...

Debian: Security Advisory (DSA-3622-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...