CVE-2011-1062 - CVE House
Back to Database
Status published Medium CVE-2011-1062

Multiple cross-site scripting (XSS) vulnerabilities in include/html/header.php in TaskFreak! 0.6.4...

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in include/html/header.php in TaskFreak! 0.6.4 allow remote attackers to inject arbitrary web script or HTML via the (1) sContext, (2) sort, (3) dir, and (4) show parameters in a save action to index.php; the (5) dir and (6) show parameters to print_list.php; and the (7) HTTP referer header to rss.php. NOTE: some of these details are obtained from third party information.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2011-1062

Credits & Attribution

No credits recorded in the NVD database.

References

More from taskfreak

View All →
CVE-2011-3805
TaskFreak! multi-mysql-0.6 allows remote attackers to obtain sensitive information via...
Medium 5
CVE-2010-1583
SQL injection vulnerability in the loadByKey function in the TznDbConnection...
High 7.5
CVE-2010-1521
SQL injection vulnerability in include/classes/tzn_user.php in TaskFreak! Original multi user...
High 7.5
CVE-2010-1520
Cross-site scripting (XSS) vulnerability in logout.php in TaskFreak! Original multi...
Medium 4.3
CVE-2008-0270
SQL injection vulnerability in index.php in TaskFreak! 0.6.1 and earlier...
Medium 6

Affected Vendor

Affected Software

taskfreak\!
Vulnerable Versions:
0.6.4

Timeline

Official Publish: February 22nd, 2011
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.