PYSEC-2021-10

A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the rawsql input field of the SQL explain, analyze, or select form...

PT-2021-18736 · Django · Django Debug Toolbar

Name of the Vulnerable Software and Affected Versions: Django Debug Toolbar versions 1.x through 1.11.0 Django Debug Toolbar versions 2.x through 2.2.0 Django Debug Toolbar versions 3.x through 3.2.0 Description: A SQL Injection issue in the SQL Panel allows attackers to execute SQL statements by...