EUVD-2008-1487

Malware in sbrugna...

Django Allows Arbitrary URL Generation

The django.http.HttpRequest.gethost function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via crafted username and password Host header values...

CVE-2012-4520

The django.http.HttpRequest.gethost function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via crafted username and password Host header values...

Cross site scripting

Cross-site scripting XSS vulnerability in PunBB 1.2.16 and earlier allows remote attackers to inject arbitrary web script or HTML via the gethost parameter to moderate.php...

CVE-2008-1485

Cross-site scripting XSS vulnerability in PunBB 1.2.16 and earlier allows remote attackers to inject arbitrary web script or HTML via the gethost parameter to moderate.php...