• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Django Login Form Cross-Site Scripting Vulnerability

Solution:
The vendor has released updates. Please see the references for more information.


Debian Linux 4.0 amd64

• Debian python-django_0.95.1-1etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python-django/python-dj ango_0.95.1-1etch2_all.deb

Debian Linux 4.0 ia-32

• Debian python-django_0.95.1-1etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python-django/python-dj ango_0.95.1-1etch2_all.deb

Debian Linux 4.0 arm

• Debian python-django_0.95.1-1etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python-django/python-dj ango_0.95.1-1etch2_all.deb

Django Django 0.95

• Django Django-0.95.3.tar.gz
  http://media.djangoproject.com/releases/0.95/Django-0.95.3.tar.gz

Debian Linux 4.0 hppa

• Debian python-django_0.95.1-1etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python-django/python-dj ango_0.95.1-1etch2_all.deb

Debian Linux 4.0 sparc

• Debian python-django_0.95.1-1etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python-django/python-dj ango_0.95.1-1etch2_all.deb

Django Django 0.96

• Django Django-0.96.2.tar.gz
  http://media.djangoproject.com/releases/0.96/Django-0.96.2.tar.gz

Debian Linux 4.0 s/390

• Debian python-django_0.95.1-1etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python-django/python-dj ango_0.95.1-1etch2_all.deb

Debian Linux 4.0 powerpc

• Debian python-django_0.95.1-1etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python-django/python-dj ango_0.95.1-1etch2_all.deb

Debian Linux 4.0 alpha

• Debian python-django_0.95.1-1etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python-django/python-dj ango_0.95.1-1etch2_all.deb

Django Django 0.91

• Django Django-0.91.2.tar.gz
  http://media.djangoproject.com/releases/0.91/Django-0.91.2.tar.gz

Debian Linux 4.0 m68k

• Debian python-django_0.95.1-1etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python-django/python-dj ango_0.95.1-1etch2_all.deb

Debian Linux 4.0

• Debian python-django_0.95.1-1etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python-django/python-dj ango_0.95.1-1etch2_all.deb

Debian Linux 4.0 mipsel

• Debian python-django_0.95.1-1etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python-django/python-dj ango_0.95.1-1etch2_all.deb

Debian Linux 4.0 ia-64

• Debian python-django_0.95.1-1etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python-django/python-dj ango_0.95.1-1etch2_all.deb

Debian Linux 4.0 mips

• Debian python-django_0.95.1-1etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python-django/python-dj ango_0.95.1-1etch2_all.deb