Vulnerabilities > CVE-2007-0404 - Remote Arbitrary Command Execution vulnerability in Django Project Django 0.95
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
bin/compile-messages.py in Django 0.95 does not quote argument strings before invoking the msgfmt program through the os.system function, which allows attackers to execute arbitrary commands via shell metacharacters in a (1) .po or (2) .mo file.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |