4 matches found
CVE-2007-1198
TaskFreak! contains a Cross-site scripting (XSS) vulnerability in versions before 0.5.7 (CVE-2007-1198). The issue is described as an XSS that allows remote attackers to inject arbitrary script via unspecified vectors; connected reference CVE-2007-0982 specifies an XSS in error.php (TaskFreak! 0....
CVE-2007-0982
CVE-2007-0982 describes a cross-site scripting (XSS) vulnerability in TaskFreak! 0.5.5, exploitable through the tznMessage parameter processed by error.php. The description notes the issue as an XSS risk and references third-party sources; no patch or mitigation details are provided within the co...
CVE-2006-7097
Technical details for CVE-2006-7097 are not publicly available in the provided documents. No concrete affected products, versions, or fixes are disclosed here. Monitor for updates from official sources.
CVE-2008-0270
CVE-2008-0270 affects TaskFreak! prior to or including version 0.6.1, where an SQL injection exists in index.php triggered by the sContext parameter. The vulnerability allows remote authenticated users to execute arbitrary SQL commands. This is supported by multiple sources in the connected docum...