Skip to content
OpenAdvisories

Package · Ubuntu

web2py

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2016-3953

    web2py remote code execution via hardcoded encryption key in session.connect function

    The sample web application in web2py before 2.14.2 might allow remote attackers to execute arbitrary code via vectors involving use of a hardcoded encryption key when calling the session.connect function.

    web2py web2py Ubuntu PyPI
  • Critical 9.8
    CVE-2016-10321

    web2py is vulnerable to password brute-force attack

    web2py before 2.14.6 does not properly check if a host is denied before verifying passwords, allowing a remote attacker to perform brute-force attacks.

    web2py web2py Ubuntu PyPI