Lucene search

MitreCVE-2006-3397

HistoryJul 06, 2006 - 8:05 p.m.

CVE-2006-3397

2006-07-0620:05:00

mitre

web.nvd.nist.gov

cve-2006-3397

cross-site scripting

xss

taskjitsu

security vulnerabilities

web security

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.1

Confidence

High

EPSS

0.004

Percentile

74.1%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Taskjitsu before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters, including the (1) title and (2) description parameters when creating a task.

Affected configurations

Nvd

Node

pkr_internettaskjitsuMatch0.1

pkr_internettaskjitsuMatch2.0

VendorProductVersionCPE
pkr_internettaskjitsu0.1cpe:2.3:a:pkr_internet:taskjitsu:0.1:*:*:*:*:*:*:*
pkr_internettaskjitsu2.0cpe:2.3:a:pkr_internet:taskjitsu:2.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
pkr_internet	taskjitsu	0.1	cpe:2.3:a:pkr_internet:taskjitsu:0.1:::::::*
pkr_internet	taskjitsu	2.0	cpe:2.3:a:pkr_internet:taskjitsu:2.0:::::::*

References

secunia.com/advisories/20912

www.pkrinternet.com/download/RELEASE-NOTES.txt

www.securityfocus.com/bid/18818

www.vupen.com/english/advisories/2006/2660

exchange.xforce.ibmcloud.com/vulnerabilities/27533

www.pkrinternet.com/taskjitsu/task/3313

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.1

Confidence

High

EPSS

0.004

Percentile

74.1%

JSON

Related for CVE-2006-3397