3 results · Clear filters · Feed
-
Medium 6.1
webpy web.py 0.76 is vulnerable to Cross Site Scripting (XSS) via render_jinja.__init__().
-
Medium 6.8
webpy web.py 0.76 is vulnerable to Session Fixation. The component Session._load() reads session_id directly from the r…
-
Medium 6.3
webpy web.py db.py PostgresDB._process_insert_query sql injection
A vulnerability, which was classified as critical, was found in webpy web.py 0.70. Affected is the function PostgresDB._process_insert_query of the file web/db.py. The manipulation of the argument seqname leads to sql injection. It is possible to launch the a…