Archive
February 2011
Vulnerabilities first published in this month (UTC), newest first.
2 results · Clear filters · Feed
-
Critical 9.1
Directory traversal in Django
Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or execute files via a / (slash) character in a key in a session cookie, related to session replays.
-
Critical 9.1
Plone Privilege Escalation Vulnerability
Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers to obtain administrative access, read or create arbitrary content, and change the site skin via unknown vectors.