Advisories · Technology
liangliangyy DjangoBlog.
Every CVE that names liangliangyy DjangoBlog among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 2.3 Low
liangliangyy DjangoBlog File Upload Endpoint settings.py hard-coded key
- liangliangyy DjangoBlog
- Hard-coded credentials
- CWE-320
- CVSS 6.3 Medium
liangliangyy DjangoBlog Setting settings.py hard-coded credentials
- liangliangyy DjangoBlog
- Hard-coded credentials
- CVSS 5.3 Medium
liangliangyy DjangoBlog views.py form_valid improper authorization
- liangliangyy DjangoBlog
- Privilege escalation
- Broken access control
- CVSS 6.9 Medium
liangliangyy DjangoBlog Amap API Call views.py hard-coded key
- liangliangyy DjangoBlog
- Hard-coded credentials
- CWE-320
- CVSS 6.9 Medium
liangliangyy DjangoBlog Clean Endpoint views.py missing authentication
- liangliangyy DjangoBlog
- Authentication bypass
- CVSS 6.3 Medium
liangliangyy DjangoBlog Setting settings.py hard-coded credentials
- liangliangyy DjangoBlog
- Hard-coded credentials
- CVSS 6.9 Medium
liangliangyy DjangoBlog logtracks Endpoint views.py missing authentication
- liangliangyy DjangoBlog
- Authentication bypass
- CVSS 5.3 Medium
liangliangyy DjangoBlog WeChat Bot commonapi.py CommandHandler command injection
- liangliangyy DjangoBlog
- Other injection
- Command injection
- CVSS 4.8 Medium
Cross-site Scripting (XSS) - Stored in liangliangyy/djangoblog
- liangliangyy/djangoblog
- Cross-site scripting (XSS)