Description
Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or execute files via a / (slash) character in a key in a session cookie, related to session replays.
Remediation
References
Related Vulnerabilities
LimeSurvey Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2007-5573)
WordPress Plugin Video Gallery /w YouTube, Vimeo Arbitrary File Upload (8.48)
Joomla! Core SQL Injection (1.7.0 - 3.9.15)
WordPress Plugin Advance Menu Manager Cross-Site Request Forgery (2.9.6)
Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-10241)