CVE-2010-1520

CVE-2010-1520: TaskFreak! is affected by a Cross-Site Scripting vulnerability in logout.php via the tznMessage parameter in original multi-user releases before 0.6.4. The issue allows remote attackers to inject arbitrary HTML/script when a user loads the affected logout page. Multiple sources cor...

CVE-2011-1062

TaskFreak! 0.6.4 exposes multiple XSS vulnerabilities in include/html/header.php allowing injection via (1) sContext, (2) sort, (3) dir, (4) show in index.php; (5) dir, (6) show in print_list.php; and (7) Referer header to rss.php. No remediation details are provided in the supplied documents; no...