CVE-2006-3397

Multiple cross-site scripting (XSS) vulnerabilities in Taskjitsu before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters, including the (1) title and (2) description parameters when creating a task.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://secunia.com/advisories/20912	Patch Vendor Advisory
http://www.pkrinternet.com/download/RELEASE-NOTES.txt	URL Repurposed
http://www.securityfocus.com/bid/18818	Patch
http://www.vupen.com/english/advisories/2006/2660
https://exchange.xforce.ibmcloud.com/vulnerabilities/27533
https://www.pkrinternet.com/taskjitsu/task/3313	URL Repurposed

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:pkr_internet:taskjitsu:0.1:::::::*
	cpe:2.3:a:pkr_internet:taskjitsu:2.0:::::::*

History

No history.

Information

Published : 2006-07-06 20:05

Updated : 2024-02-14 01:17

NVD link : CVE-2006-3397

Mitre link : CVE-2006-3397

CVE.ORG link : CVE-2006-3397

JSON object : View

Products Affected

pkr_internet

taskjitsu

CWE

NVD-CWE-Other

{"id": "CVE-2006-3397", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-07-06T20:05:00.000", "references": [{"url": "http://secunia.com/advisories/20912", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.pkrinternet.com/download/RELEASE-NOTES.txt", "tags": ["URL Repurposed"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/18818", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/2660", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27533", "source": "cve@mitre.org"}, {"url": "https://www.pkrinternet.com/taskjitsu/task/3313", "tags": ["URL Repurposed"], "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in Taskjitsu before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters, including the (1) title and (2) description parameters when creating a task."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de ejecuci\u00f3n de secuencias de comandos en sitios cruzados (XSS) en Taskjitsu anterior a v2.0.1 permite a atacantes remotos inyectar inyectar secuencias de comandos web y HTML de su elecci\u00f3n a trav\u00e9s de m\u00faltiples par\u00e1metros sin especificar, incluyendo (1) el t\u00edtulo y (2)la descripci\u00f3n de par\u00e1metros cuando se crea una tarea."}], "lastModified": "2024-02-14T01:17:43.863", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:pkr_internet:taskjitsu:0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D9546620-3256-4D85-A144-789A12C5F89D"}, {"criteria": "cpe:2.3:a:pkr_internet:taskjitsu:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A03C9348-DD01-4CB3-A5E4-153A8AFA7024"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}