CVE-2010-1520

TaskFreak! <0.6.4 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in logout.php in TaskFreak! Original multi user before 0.6.4 allows remote attackers to inject arbitrary web script or HTML via the tznMessage parameter.

References (6)

[Third Party Advisory, VDB Entry] http://osvdb.org/65846

[Vendor Advisory] http://secunia.com/advisories/40025

[Vendor Advisory] http://secunia.com/secunia_research/2010-78/

[Patch] http://www.taskfreak.com/original/versions

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/512078/100/0/threaded

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/41221

Scores

EPSS 0.0050

EPSS Percentile 65.6%

Classification

CWE

CWE-79

Status published

Affected Products (26)

taskfreak/taskfreak\! < 0.6.3

taskfreak/taskfreak\!

... and 11 more

Timeline

Published Jun 30, 2010

Tracked Since Feb 18, 2026