CVE-2006-3397

Multiple cross-site scripting (XSS) vulnerabilities in Taskjitsu before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters, including the (1) title and (2) description parameters when creating a task.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://www.pkrinternet.com/taskjitsu/task/3313
http://www.pkrinternet.com/download/RELEASE-NOTES.txt
http://www.securityfocus.com/bid/18818	Patch
http://secunia.com/advisories/20912	Patch Vendor Advisory
http://www.vupen.com/english/advisories/2006/2660
https://exchange.xforce.ibmcloud.com/vulnerabilities/27533

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:pkr_internet:taskjitsu:0.1:::::::*
	cpe:2.3:a:pkr_internet:taskjitsu:2.0:::::::*

Information

Published : 2006-07-06 13:05

Updated : 2017-07-19 18:32

NVD link : CVE-2006-3397

Mitre link : CVE-2006-3397

JSON object : View

CWE

NVD-CWE-Other

Advertisement

Products Affected

pkr_internet

taskjitsu

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://www.pkrinternet.com/taskjitsu/task/3313", "name": "https://www.pkrinternet.com/taskjitsu/task/3313", "tags": [], "refsource": "MISC"}, {"url": "http://www.pkrinternet.com/download/RELEASE-NOTES.txt", "name": "http://www.pkrinternet.com/download/RELEASE-NOTES.txt", "tags": [], "refsource": "CONFIRM"}, {"url": "http://www.securityfocus.com/bid/18818", "name": "18818", "tags": ["Patch"], "refsource": "BID"}, {"url": "http://secunia.com/advisories/20912", "name": "20912", "tags": ["Patch", "Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.vupen.com/english/advisories/2006/2660", "name": "ADV-2006-2660", "tags": [], "refsource": "VUPEN"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27533", "name": "taskjitsu-task-xss(27533)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in Taskjitsu before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters, including the (1) title and (2) description parameters when creating a task."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2006-3397", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "severity": "MEDIUM", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2006-07-06T20:05Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:pkr_internet:taskjitsu:0.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:pkr_internet:taskjitsu:2.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-07-20T01:32Z"}