CVEvulnerability
CVE-2008-2302
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-05-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the URI of a certain previous request.
Affected configurations
• django project django 0.91
• django project django 0.95
• django project django 0.96
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/30250 Patch, Vendor Advisory
- http://secunia.com/advisories/30291 secunia.com
- http://securitytracker.com/id?1020028 securitytracker.com
- http://www.djangoproject.com/weblog/2008/may/14/security/ Patch
- http://www.securityfocus.com/bid/29209 Patch
- http://www.vupen.com/english/advisories/2008/1618 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42396 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/30250 Patch, Vendor Advisory
- http://secunia.com/advisories/30291 secunia.com
- http://securitytracker.com/id?1020028 securitytracker.com
- http://www.djangoproject.com/weblog/2008/may/14/security/ Patch
- http://www.securityfocus.com/bid/29209 Patch
- http://www.vupen.com/english/advisories/2008/1618 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42396 exchange.xforce.ibmcloud.com