CVE-2010-1520

CVE-2010-1520

EPSS 1.9%

Cross-site scripting (XSS) vulnerability in logout.php in TaskFreak! Original multi user before 0.6.4 allows remote attackers to inject arbitrary web script or HTML via the tznMessage parameter.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/65846 http://secunia.com/advisories/40025 http://secunia.com/secunia_research/2010-78/http://www.securityfocus.com/archive/1/512078/100/0/threaded http://www.securityfocus.com/bid/41221 http://www.taskfreak.com/original/versions