Code execution vulnerability in cms made simple backend

CMS Made Simple is an open source content management system. It is built using PHP and Smarty Engine , which separates content , functionality and templates . cms made simple version 2.2.7 has a code execution vulnerability in the backend when performing module import, which can be exploited by a...

SUSE-SU-2015:2172-1 Security update for orca

This orca update fixes the following security issue. - Don't try to import modules from current working directory bsc916835, CVE-2013-4245...

python-django: unexpected code execution using reverse()

The django.core.urlresolvers.reverse function in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 allows remote attackers to import and execute arbitrary Python modules by leveraging a view that constructs URLs using user input and a "dotted Python path."...

USN-2169-1 python-django vulnerabilities

Benjamin Bach discovered that Django incorrectly handled dotted Python paths when using the reverse function. An attacker could use this issue to cause Django to import arbitrary modules from the Python path, resulting in possible code execution. CVE-2014-0472 Paul McMillan discovered that Django...