Description
The form library in Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 allows remote attackers to bypass intended resource limits for formsets and cause a denial of service (memory consumption) or trigger server errors via a modified max_num parameter.
Remediation
References
Related Vulnerabilities
PleskLin Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4878)
WordPress Plugin WordPress Meta Robots SQL Injection (2.1)
WordPress Plugin All-in-One Event Calendar Cross-Site Scripting (2.5.38)
WordPress Plugin Really Easy Slider TimThumb Arbitrary File Upload (0.1)
WordPress 'paged' Parameter SQL Injection Vulnerability (2.0.2 - 2.0.5)