Django Project Django
6 CVEs affecting Django Project Django. Latest disclosed: 2009-08-04. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2009-2659 | | 2009-08-04 | The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows re… | |
CVE-2008-2302 | | 2008-05-23 | Cross-site scripting (XSS) vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before… | |
CVE-2007-5828 | | 2007-11-05 | Cross-site request forgery (CSRF) vulnerability in the admin panel in Django 0.96 allows remote attackers to change passwords of arbitrary users via a request… | |
CVE-2007-5712 | | 2007-10-30 | The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and t… | |
CVE-2007-0405 | | 2007-01-23 | The LazyUser class in the AuthenticationMiddleware for Django 0.95 does not properly cache the user name across requests, which allows remote authenticated use… | |
CVE-2007-0404 | | 2007-01-23 | bin/compile-messages.py in Django 0.95 does not quote argument strings before invoking the msgfmt program through the os.system function, which allows attacker… |