Taskfreak: >> Taskfreak! >> 0.2.2 Security Vulnerabilities
Cross-site scripting (XSS) vulnerability in logout.php in TaskFreak! Original multi user before 0.6.4 allows remote attackers to inject arbitrary web script or HTML via the tznMessage parameter.
CVSS Score
4.3
EPSS Score
0.005
Published
2010-06-30
SQL injection vulnerability in include/classes/tzn_user.php in TaskFreak! Original multi user before 0.6.4 allows remote attackers to execute arbitrary SQL commands via the password parameter to login.php.
CVSS Score
7.5
EPSS Score
0.007
Published
2010-06-30