88 matches found
TaskFreak! Default Credentials
The installation of TaskFreak! hosted on the remote web server uses the default username and password to control access to its administrative console. Knowing these, an attacker can gain control of the affected application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Sql injection
SQL injection vulnerability in index.php in TaskFreak! 0.6.1 and earlier allows remote authenticated users to execute arbitrary SQL commands via the sContext parameter...
CVE-2008-0270
SQL injection vulnerability in index.php in TaskFreak! 0.6.1 and earlier allows remote authenticated users to execute arbitrary SQL commands via the sContext parameter...
CVE-2008-0270
CVE-2008-0270 affects TaskFreak! prior to or including version 0.6.1, where an SQL injection exists in index.php triggered by the sContext parameter. The vulnerability allows remote authenticated users to execute arbitrary SQL commands. This is supported by multiple sources in the connected docum...
CVE-2008-0270
SQL injection vulnerability in index.php in TaskFreak! 0.6.1 and earlier allows remote authenticated users to execute arbitrary SQL commands via the sContext parameter...
CVE-2008-0270: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in TaskFreak! 0.6.1 and earlier allows remote authenticated users to execute arbitrary SQL commands via the sContext parameter...
taskfreak-sql.txt
| | |--.-----.| .-----.' |.---.-.----.-----.--| | | | | | -|| -- | -| || | | -| | || |||||/||| |.|||| TheDefaced.org TheDefaced Security Team Presents An 0-day. TaskFreak! SQL Injection Product: TaskFreak!/Discovered in ==0.6.1 Vuln: Remote SQL Injection Description: The request is not sanitized...
TaskFreak! <= 0.6.1 Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ====================================================== TaskFreak! = 0.6.1 Remote SQL Injection Vulnerability ====================================================== | | |--.-----.| .-----.' |.---.-.----.-----.--| | | | | | -|| -- | -| || | ...
TaskFreak! <= 0.6.1 Remote SQL Injection Vulnerability
No description provided by source. | | |--.-----.| .-----.' |.---.-.----.-----.--| | | | | | -|| -- | -| || | | -| | || |||||/||| |.||||...
TaskFreak! 0.6.1 - SQL Injection
TaskFreak! 0.6.1 - SQL Injection | | |--.-----.| .-----.' |.---.-.----.-----.--| | | | | | -|| -- | -| || | | -| | || |||||/||| |.|||| TheDefaced.org TheDefaced Security Team Presents An 0-day. TaskFreak! SQL Injection Product: TaskFreak!/Discovered in ==0.6.1 Vuln: Remote SQL Injection...
TaskFreak! 0.6.1 - SQL Injection
| | |--.-----.| .-----.' |.---.-.----.-----.--| | | | | | -|| -- | -| || | | -| | || |||||/||| |.|||| TheDefaced.org TheDefaced Security Team Presents An 0-day. TaskFreak! SQL Injection Product: TaskFreak!/Discovered in ==0.6.1 Vuln: Remote SQL Injection Description:...
CVE-2007-1198
Cross-site scripting XSS vulnerability in TaskFreak! before 0.5.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly a variant of CVE-2007-0982...
Cross site scripting
Cross-site scripting XSS vulnerability in TaskFreak! before 0.5.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly a variant of CVE-2007-0982...
CVE-2006-7097
Multiple unspecified vulnerabilities in TaskFreak! before 0.1.4 have unknown impact and attack vectors...
CVE-2007-1198
Cross-site scripting XSS vulnerability in TaskFreak! before 0.5.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly a variant of CVE-2007-0982...
CVE-2006-7097
Technical details for CVE-2006-7097 are not publicly available in the provided documents. No concrete affected products, versions, or fixes are disclosed here. Monitor for updates from official sources.
CVE-2007-1198
TaskFreak! contains a Cross-site scripting (XSS) vulnerability in versions before 0.5.7 (CVE-2007-1198). The issue is described as an XSS that allows remote attackers to inject arbitrary script via unspecified vectors; connected reference CVE-2007-0982 specifies an XSS in error.php (TaskFreak! 0....
CVE-2007-1198
Cross-site scripting XSS vulnerability in TaskFreak! before 0.5.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly a variant of CVE-2007-0982...