VRDA Feed : Provides information for vulnerability impact analysis

VRDA Feed by

Vulnerability Response Decision Assistance Feed : Information for vulnerability impact analysis

[ about VRDA Feed | JPCERT/CC ]

Vulnerability Analysis Result (Revision No : 1)

[ Download XML ]

CVE-2010-1520

taskfreak!: Cross-site scripting (XSS) vulnerability in logout....

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-1520

Original

Cross-site scripting (XSS) vulnerability in logout.php in TaskFreak! Original multi user before 0.6.4 allows remote attackers to inject arbitrary web script or HTML via the tznMessage parameter.

Translation (Show)

About This Analysis Information

Analysis Information Provider:

NIST NVD

First Published:

2010-06-30

Source Information Category:

Advisory, Alert

Last Updated:

2010-07-01

Affected Product Tags

cpe:/a:taskfreak:taskfreak%21:0.1

cpe:/a:taskfreak:taskfreak%21:0.1.2

cpe:/a:taskfreak:taskfreak%21:0.1.3

cpe:/a:taskfreak:taskfreak%21:0.1.4

cpe:/a:taskfreak:taskfreak%21:0.2.0

cpe:/a:taskfreak:taskfreak%21:0.2.1

cpe:/a:taskfreak:taskfreak%21:0.2.2

cpe:/a:taskfreak:taskfreak%21:0.3.0

cpe:/a:taskfreak:taskfreak%21:0.3.1

cpe:/a:taskfreak:taskfreak%21:0.3.2

cpe:/a:taskfreak:taskfreak%21:0.4.0

cpe:/a:taskfreak:taskfreak%21:0.4.1

cpe:/a:taskfreak:taskfreak%21:0.4.2

cpe:/a:taskfreak:taskfreak%21:0.5.0

cpe:/a:taskfreak:taskfreak%21:0.5.1

cpe:/a:taskfreak:taskfreak%21:0.5.2

cpe:/a:taskfreak:taskfreak%21:0.5.3

cpe:/a:taskfreak:taskfreak%21:0.5.4

cpe:/a:taskfreak:taskfreak%21:0.5.5

cpe:/a:taskfreak:taskfreak%21:0.5.6

cpe:/a:taskfreak:taskfreak%21:0.5.7

cpe:/a:taskfreak:taskfreak%21:0.6.0

cpe:/a:taskfreak:taskfreak%21:0.6.1

cpe:/a:taskfreak:taskfreak%21:0.6.2

cpe:/a:taskfreak:taskfreak%21:0.6.3 and previous versions

Vulnerability Analysis Results

[Access Vector] ^[?]

Undefined^[?]

Local^[?]

Adjacent Network^[?]

Network^[?]

[Access Complexit] ^[?]

Undefined^[?]

High^[?]

Medium^[?]

Low^[?]

[Authentication] ^[?]

Undefined^[?]

Multiple^[?]

Single^[?]

None^[?]

[Confidentiality Impact] ^[?]

Undefined^[?]

None^[?]

Partial^[?]

Complete^[?]

[Integrity Impact] ^[?]

Undefined^[?]

None^[?]

Partial^[?]

Complete^[?]

[Availability Impact] ^[?]

Undefined^[?]

None^[?]

Partial^[?]

Complete^[?]

Alternatives

References

BID 41221

BUGTRAQ 20100629 Secunia Research: TaskFreak

CONFIRM http://www.taskfreak.com/original/versions

MISC http://secunia.com/secunia_research/2010-78/

SECUNIA 40025

Vulnerability Type Cross-Site Scripting (XSS) (CWE-79)