Django version 0.96 suffers from a cross site request forgery vulnerability in the administrative panel.