Unrated severityNVD Advisory· Published Aug 1, 2006· Updated Jun 16, 2026
CVE-2006-3958
CVE-2006-3958
Description
Multiple unspecified cross-site scripting (XSS) vulnerabilities in Taskjitsu 2.0.3 allow remote attackers to inject arbitrary web script or HTML via (1) the Search Tasks system, or authenticated users via (2) the Edit Task system, (3) the back-end Category Editor system, and (4) "Pages that display task status, email addresses, URL, customer, and project information."
Affected products
2cpe:2.3:a:pkr_internet:taskjitsu:2.0.3:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:pkr_internet:taskjitsu:2.0.3:*:*:*:*:*:*:*
- (no CPE)range: = 2.0.3
Patches
Vulnerability mechanics
References
7- secunia.com/advisories/21242nvdPatchVendor Advisory
- www.vupen.com/english/advisories/2006/3058nvdVendor Advisory
- www.pkrinternet.com/download/RELEASE-NOTES.txtnvdURL Repurposed
- www.pkrinternet.com/taskjitsu/task/3477nvdURL Repurposed
- www.osvdb.org/27637nvd
- www.securityfocus.com/bid/19251nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/28178nvd
News mentions
0No linked articles in our index yet.