CVE-2010-1520

CVE-2010-1520

EPSS 1.9%

Cross-site scripting (XSS) vulnerability in logout.php in TaskFreak! Original multi user before 0.6.4 allows remote attackers to inject arbitrary web script or HTML via the tznMessage parameter.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://osvdb.org/65846 http://secunia.com/advisories/40025 http://secunia.com/secunia_research/2010-78/http://www.securityfocus.com/archive/1/512078/100/0/threaded http://www.securityfocus.com/bid/41221 http://www.taskfreak.com/original/versions