Cross site scripting

2006-03-2811:06:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.1%

JSON

Cross-site scripting (XSS) vulnerability in MyTasks/PersonalTaskEdit.asp in Metisware Instructor 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the Task parameter.

CPENameOperatorVersion
instructorle1.3

CPE	Name	Operator	Version
	instructor	le	1.3

References

secunia.com/advisories/19385

www.osvdb.org/24139

www.securityfocus.com/bid/17234

www.vupen.com/english/advisories/2006/1112

exchange.xforce.ibmcloud.com/vulnerabilities/25490

pridels0.blogspot.com/2006/03/metisware-instructor-xss-vuln.html