EUVD-2006-3951

Malware in sbrugna...

EUVD-2006-3393

Malware in sbrugna...

EUVD-2006-3394

Malware in sbrugna...

EUVD-2006-5169

Malware in sbrugna...

CVE-2006-5184

SQL injection vulnerability in PKR Internet Taskjitsu before 2.0.6 allows remote attackers to execute arbitrary SQL commands via the key parameter, when the limit query parameter is set to customerid...

CVE-2006-5184

SQL injection vulnerability in PKR Internet Taskjitsu before 2.0.6 allows remote attackers to execute arbitrary SQL commands via the key parameter, when the limit query parameter is set to customerid...

CVE-2006-5184

The CVE affects PKR Internet Taskjitsu prior to version 2.0.6. A SQL injection exists via the key parameter when limit is set to customerid, allowing remote execution of arbitrary SQL commands. Public sources in the connected documents confirm the specific vector and impact as described by NVD/CV...

PT-2006-5919 · Pkr · Internet Taskjitsu

Name of the Vulnerable Software and Affected Versions: PKR Internet Taskjitsu versions prior to 2.0.6 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the key parameter when the limit query parameter is set to customerid. Recommendations: For...

[SA22257] Taskjitsu "key" SQL Injection Vulnerability

TITLE: Taskjitsu "key" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA22257 VERIFY ADVISORY: http://secunia.com/advisories/22257/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: Taskjitsu 2.x http://secunia.com/product/10797/ DESCRIPTION: A vulnerabilit...

CVE-2006-3958

Multiple unspecified cross-site scripting XSS vulnerabilities in Taskjitsu 2.0.3 allow remote attackers to inject arbitrary web script or HTML via 1 the Search Tasks system, or authenticated users via 2 the Edit Task system, 3 the back-end Category Editor system, and 4 "Pages that display task...

CVE-2006-3958

Multiple unspecified cross-site scripting XSS vulnerabilities in Taskjitsu 2.0.3 allow remote attackers to inject arbitrary web script or HTML via 1 the Search Tasks system, or authenticated users via 2 the Edit Task system, 3 the back-end Category Editor system, and 4 "Pages that display task...

CVE-2006-3958

Taskjitsu 2.0.3 is affected by multiple cross-site scripting (XSS) vulnerabilities disclosed in CVE-2006-3958. The issues enable injection of arbitrary script/HTML via (1) Search Tasks, (2) Edit Task (authenticated users), (3) back-end Category Editor, and (4) pages displaying task status, emails...

PT-2006-4804 · Taskjitsu · Taskjitsu

Name of the Vulnerable Software and Affected Versions: Taskjitsu version 2.0.3 Description: The issue allows remote attackers to inject arbitrary web script or HTML via multiple systems, including the Search Tasks system, the Edit Task system, the back-end Category Editor system, and pages that...

CVE-2006-3398

The "change password forms" in Taskjitsu before 2.0.1 includes password hashes in hidden form fields, which allows remote attackers to obtain sensitive information from the 1 Category Editor and 2 User Information editor...

CVE-2006-3397

Multiple cross-site scripting XSS vulnerabilities in Taskjitsu before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters, including the 1 title and 2 description parameters when creating a task...

CVE-2006-3397

Multiple cross-site scripting XSS vulnerabilities in Taskjitsu before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters, including the 1 title and 2 description parameters when creating a task...

CVE-2006-3398

The CVE-2006-3398 entry involves Taskjitsu prior to 2.0.1, where password hashes are embedded in hidden fields of the change password forms. This allows remote attackers to obtain sensitive information from the Category Editor and the User Information editor. The issue is tied to versions before ...

CVE-2006-3397

Taskjitsu (CVE-2006-3397) has a cross-site scripting vulnerability affecting versions before 2.0.1. The flaw allows remote attackers to inject arbitrary web script or HTML through multiple parameters when creating a task, notably the title and description fields. The PT-2006-4289 entry confirms t...

CVE-2006-3398

The "change password forms" in Taskjitsu before 2.0.1 includes password hashes in hidden form fields, which allows remote attackers to obtain sensitive information from the 1 Category Editor and 2 User Information editor...

PT-2006-4289 · Taskjitsu · Taskjitsu

Name of the Vulnerable Software and Affected Versions: Taskjitsu versions prior to 2.0.1 Description: The issue allows remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters, including the title and description parameters when creating a task. Recommendations:...