5
CVE-2006-3398
- EPSS 1.35%
- Veröffentlicht 06.07.2006 20:05:00
- Zuletzt bearbeitet 16.06.2026 22:26:59
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginThe "change password forms" in Taskjitsu before 2.0.1 includes password hashes in hidden form fields, which allows remote attackers to obtain sensitive information from the (1) Category Editor and (2) User Information editor.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Pkr Internet ≫ Taskjitsu Version0.1
Pkr Internet ≫ Taskjitsu Version2.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.35% | 0.679 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
http://www.pkrinternet.com/download/RELEASE-NOTES.txt
http://www.vupen.com/english/advisories/2006/2660
https://www.pkrinternet.com/taskjitsu/task/3400