CVE-2006-3397
Summary
| CVE | CVE-2006-3397 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2006-07-06 20:05:00 UTC |
| Updated | 2017-07-20 01:32:00 UTC |
| Description | Multiple cross-site scripting (XSS) vulnerabilities in Taskjitsu before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters, including the (1) title and (2) description parameters when creating a task. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Pkr Internet | Taskjitsu | 0.1 | All | All | All |
| Application | Pkr Internet | Taskjitsu | 2.0 | All | All | All |
| Application | Pkr Internet | Taskjitsu | 0.1 | All | All | All |
| Application | Pkr Internet | Taskjitsu | 2.0 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | VUPEN | www.vupen.com | |
| Taskjitsu - Task # 3313 | MISC | www.pkrinternet.com | |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| www.pkrinternet.com/download/RELEASE-NOTES.txt | CONFIRM | www.pkrinternet.com | |
| Taskjitsu Task Script Insertion Vulnerabilities - Advisories - Secunia | SECUNIA | secunia.com | Patch, Vendor Advisory |
| Taskjitsu Multiple HTML Injection Vulnerabilities | BID | www.securityfocus.com | Patch |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.