CVE-2015-6961

Mô tả

Tham khảo

• web2py/web2py commit e31a099 · Patch
• web2py/web2py · Third Party Advisory

Lỗ hổng khác của web2py

• CVE-2023-45158NGHIÊM TRỌNG 9.8An OS command injection vulnerability exists in web2py 2.24.1 and earlier. When the product is configured to use notifySendHandler for loggi…
• CVE-2023-22432TRUNG BÌNH 6.1Open redirect vulnerability exists in web2py versions prior to 2.23.1. When using the tool, a web2py user may be redirected to an arbitrary …
• CVE-2022-33146TRUNG BÌNH 6.1Open redirect vulnerability in web2py versions prior to 2.22.5 allows a remote attacker to redirect a user to an arbitrary web site and cond…
• CVE-2016-3957NGHIÊM TRỌNG 9.8The secure_load function in gluon/utils.py in web2py before 2.14.2 uses pickle.loads to deserialize session information stored in cookies, w…
• CVE-2016-3954TRUNG BÌNH 5.5web2py before 2.14.2 allows remote attackers to obtain the session_cookie_key value via a direct request to examples/simple_examples/status.…