• info
• discussion
• exploit
• solution
• references

Django Login Form Cross-Site Scripting Vulnerability

Solution:
The vendor has released updates. Please see the references for more information.


Debian Linux 4.0 amd64

• Debian python-django_0.95.1-1etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python-django/python-dj ango_0.95.1-1etch2_all.deb

Debian Linux 4.0 ia-32

• Debian python-django_0.95.1-1etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python-django/python-dj ango_0.95.1-1etch2_all.deb

Debian Linux 4.0 arm

• Debian python-django_0.95.1-1etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python-django/python-dj ango_0.95.1-1etch2_all.deb

Django Django 0.95

• Django Django-0.95.3.tar.gz
  http://media.djangoproject.com/releases/0.95/Django-0.95.3.tar.gz

Debian Linux 4.0 hppa

• Debian python-django_0.95.1-1etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python-django/python-dj ango_0.95.1-1etch2_all.deb

Debian Linux 4.0 sparc

• Debian python-django_0.95.1-1etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python-django/python-dj ango_0.95.1-1etch2_all.deb

Django Django 0.96

• Django Django-0.96.2.tar.gz
  http://media.djangoproject.com/releases/0.96/Django-0.96.2.tar.gz

Debian Linux 4.0 s/390

• Debian python-django_0.95.1-1etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python-django/python-dj ango_0.95.1-1etch2_all.deb

Debian Linux 4.0 powerpc

• Debian python-django_0.95.1-1etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python-django/python-dj ango_0.95.1-1etch2_all.deb

Debian Linux 4.0 alpha

• Debian python-django_0.95.1-1etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python-django/python-dj ango_0.95.1-1etch2_all.deb

Django Django 0.91

• Django Django-0.91.2.tar.gz
  http://media.djangoproject.com/releases/0.91/Django-0.91.2.tar.gz

Debian Linux 4.0 m68k

• Debian python-django_0.95.1-1etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python-django/python-dj ango_0.95.1-1etch2_all.deb

Debian Linux 4.0

• Debian python-django_0.95.1-1etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python-django/python-dj ango_0.95.1-1etch2_all.deb

Debian Linux 4.0 mipsel

• Debian python-django_0.95.1-1etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python-django/python-dj ango_0.95.1-1etch2_all.deb

Debian Linux 4.0 ia-64

• Debian python-django_0.95.1-1etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python-django/python-dj ango_0.95.1-1etch2_all.deb

Debian Linux 4.0 mips

• Debian python-django_0.95.1-1etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python-django/python-dj ango_0.95.1-1etch2_all.deb