CVE ID:	CVE-2011-0697
Description:	Cross-site scripting (XSS) vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrary web script or HTML via a filename associated with a file upload.
Test IDs:	1.3.6.1.4.1.25623.1.0.863551   1.3.6.1.4.1.25623.1.0.70346   1.3.6.1.4.1.25623.1.0.68996   1.3.6.1.4.1.25623.1.0.69110   1.3.6.1.4.1.25623.1.0.68887   1.3.6.1.4.1.25623.1.0.68886
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2011-0697 43230 http://secunia.com/advisories/43230 43297 http://secunia.com/advisories/43297 43382 http://secunia.com/advisories/43382 43426 http://secunia.com/advisories/43426 46296 http://www.securityfocus.com/bid/46296 ADV-2011-0372 http://www.vupen.com/english/advisories/2011/0372 ADV-2011-0388 http://www.vupen.com/english/advisories/2011/0388 ADV-2011-0429 http://www.vupen.com/english/advisories/2011/0429 ADV-2011-0439 http://www.vupen.com/english/advisories/2011/0439 ADV-2011-0441 http://www.vupen.com/english/advisories/2011/0441 DSA-2163 http://www.debian.org/security/2011/dsa-2163 FEDORA-2011-1235 http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054208.html FEDORA-2011-1261 http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054207.html MDVSA-2011:031 http://www.mandriva.com/security/advisories?name=MDVSA-2011:031 USN-1066-1 http://www.ubuntu.com/usn/USN-1066-1 [oss-security] 20110209 Django multiple flaws (CVEs inside) http://openwall.com/lists/oss-security/2011/02/09/6 http://www.djangoproject.com/weblog/2011/feb/08/security/ http://www.djangoproject.com/weblog/2011/feb/08/security/ https://bugzilla.redhat.com/show_bug.cgi?id=676359 https://bugzilla.redhat.com/show_bug.cgi?id=676359