CVEvulnerability
CVE-2006-3958
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-08-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Multiple unspecified cross-site scripting (XSS) vulnerabilities in Taskjitsu 2.0.3 allow remote attackers to inject arbitrary web script or HTML via (1) the Search Tasks system, or authenticated users via (2) the Edit Task system, (3) the back-end Category Editor system, and (4) "Pages that display task status, email addresses, URL, customer, and project information."
Affected configurations
• pkr internet taskjitsu 2.0.3
References
- http://secunia.com/advisories/21242 Patch, Vendor Advisory
- http://www.osvdb.org/27637 www.osvdb.org
- http://www.pkrinternet.com/download/RELEASE-NOTES.txt URL Repurposed
- http://www.securityfocus.com/bid/19251 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/3058 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28178 exchange.xforce.ibmcloud.com
- https://www.pkrinternet.com/taskjitsu/task/3477 URL Repurposed
- http://secunia.com/advisories/21242 Patch, Vendor Advisory
- http://www.osvdb.org/27637 www.osvdb.org
- http://www.pkrinternet.com/download/RELEASE-NOTES.txt URL Repurposed
- http://www.securityfocus.com/bid/19251 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/3058 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28178 exchange.xforce.ibmcloud.com
- https://www.pkrinternet.com/taskjitsu/task/3477 URL Repurposed