Preston Holmes

2 exploits Active since Nov 2012
CVE-2012-4520 WRITEUP WRITEUP
Django 1.3-1.3.4 and 1.4-1.4.2 - Arbitrary URL Generation via Host Header
The django.http.HttpRequest.get_host function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via crafted username and password Host header values.
CVE-2012-4520 WRITEUP WRITEUP
Django 1.3-1.3.4 and 1.4-1.4.2 - Arbitrary URL Generation via Host Header
The django.http.HttpRequest.get_host function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via crafted username and password Host header values.