CVE-2010-1520

CVE-2010-1520

EPSS 1.9%

Cross-site scripting (XSS) vulnerability in logout.php in TaskFreak! Original multi user before 0.6.4 allows remote attackers to inject arbitrary web script or HTML via the tznMessage parameter.

Productos afectados

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://osvdb.org/65846 http://secunia.com/advisories/40025 http://secunia.com/secunia_research/2010-78/http://www.securityfocus.com/archive/1/512078/100/0/threaded http://www.securityfocus.com/bid/41221 http://www.taskfreak.com/original/versions