4.3

CVE-2006-3397

Multiple cross-site scripting (XSS) vulnerabilities in Taskjitsu before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters, including the (1) title and (2) description parameters when creating a task.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Pkr Internet ≫ Taskjitsu Version0.1
Pkr Internet ≫ Taskjitsu Version2.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.28% 0.661
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/20912
Patch
Vendor Advisory
http://www.pkrinternet.com/download/RELEASE-NOTES.txt
URL Repurposed
http://www.securityfocus.com/bid/18818
Patch
http://www.vupen.com/english/advisories/2006/2660
https://exchange.xforce.ibmcloud.com/vulnerabilities/27533
https://www.pkrinternet.com/taskjitsu/task/3313
URL Repurposed