CVE-2006-3397

Taskjitsu (CVE-2006-3397) has a cross-site scripting vulnerability affecting versions before 2.0.1. The flaw allows remote attackers to inject arbitrary web script or HTML through multiple parameters when creating a task, notably the title and description fields. The PT-2006-4289 entry confirms t...

CVE-2006-3958

Taskjitsu 2.0.3 is affected by multiple cross-site scripting (XSS) vulnerabilities disclosed in CVE-2006-3958. The issues enable injection of arbitrary script/HTML via (1) Search Tasks, (2) Edit Task (authenticated users), (3) back-end Category Editor, and (4) pages displaying task status, emails...