5 matches found
EUVD-2008-1487
Malware in sbrugna...
4.3CVSS6.4AI score0.01022EPSS
SaveExploits0References4
Django Allows Arbitrary URL Generation
The django.http.HttpRequest.gethost function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via crafted username and password Host header values...
6.4CVSS7.2AI score0.03665EPSS
SaveExploits1References25Affected Software1
CVE-2012-4520
The django.http.HttpRequest.gethost function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via crafted username and password Host header values...
6.4CVSS6.6AI score0.03665EPSS
SaveExploits1References17
Cross site scripting
Cross-site scripting XSS vulnerability in PunBB 1.2.16 and earlier allows remote attackers to inject arbitrary web script or HTML via the gethost parameter to moderate.php...
4.3CVSS6.2AI score0.01022EPSS
SaveExploits0References3Affected Software1
20