English | Deutsch | Español | Português
 UserID:
 Passwd:
new user
 About:   Dedicated  | Advanced  | Standard  | Recurring  | No Risk  | Desktop  | Basic  | Single  | Security Seal  | FAQ
  Price/Feature Summary  | Order  | New Vulnerabilities  | Confidentiality  | Vulnerability Search
 Vulnerability   
Search   
    Search 134041 CVE descriptions
and 69903 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2010-4534
Description:The administrative interface in django.contrib.admin in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not properly restrict use of the query string to perform certain object filtering, which allows remote authenticated users to obtain sensitive information via a series of requests containing regular expressions, as demonstrated by a created_by__password__regex parameter.
Test IDs: None available
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2010-4534
Bugtraq: 20101223 Django admin list filter data extraction / leakage (Google Search)
http://www.securityfocus.com/archive/1/515446
http://archives.neohapsis.com/archives/fulldisclosure/2010-12/0580.html
http://www.openwall.com/lists/oss-security/2010/12/23/4
http://www.openwall.com/lists/oss-security/2011/01/03/5
http://evilpacket.net/2010/dec/22/information-leakage-django-administrative-interfac/
http://ngenuity-is.com/advisories/2010/dec/22/information-leakage-in-django-administrative-inter/
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053041.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053072.html
http://www.ubuntu.com/usn/USN-1040-1
BugTraq ID: 45562
http://www.securityfocus.com/bid/45562
http://secunia.com/advisories/42715
http://secunia.com/advisories/42827
http://secunia.com/advisories/42913
http://www.vupen.com/english/advisories/2011/0048
http://www.vupen.com/english/advisories/2011/0098

New User Registration
Email:
UserID:
Passwd:
Please email me your monthly newsletters, informing the latest services, improvements & surveys.
Please email me a vulnerability test announcement whenever a new test is added.
   Privacy
Registered User Login
 
UserID:   
Passwd:  

 Forgot userid or passwd?
Email/Userid:




Home | About Us | Contact Us | Partner Programs | Developer APIs | Privacy | Mailing Lists | Abuse
Security Audits | Managed DNS | Network Monitoring | Site Analyzer | Internet Research Reports
Web Probe | Whois

© 1998-2018 E-Soft Inc. All rights reserved.