CVE-2010-1520

Published: Jun 30, 2010Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in logout.php in TaskFreak! Original multi user before 0.6.4 allows remote attackers to inject arbitrary web script or HTML via the tznMessage parameter.

Affected (25)

Products: Taskfreak: Taskfreak!

Taskfreak

1 product

Taskfreak!

Configuration A

25 vulnerable

Vulnerable Software	Affected Versions
Taskfreak Taskfreak!	Up to 0.6.3
Taskfreak Taskfreak!	Version 0.1.2
Taskfreak Taskfreak!	Version 0.1.3
Taskfreak Taskfreak!	Version 0.1.4
Taskfreak Taskfreak!	Version 0.1
Taskfreak Taskfreak!	Version 0.2.0
Taskfreak Taskfreak!	Version 0.2.1
Taskfreak Taskfreak!	Version 0.2.2
Taskfreak Taskfreak!	Version 0.3.0
Taskfreak Taskfreak!	Version 0.3.1
Taskfreak Taskfreak!	Version 0.3.2
Taskfreak Taskfreak!	Version 0.4.0
Taskfreak Taskfreak!	Version 0.4.1
Taskfreak Taskfreak!	Version 0.4.2
Taskfreak Taskfreak!	Version 0.5.0
Taskfreak Taskfreak!	Version 0.5.1
Taskfreak Taskfreak!	Version 0.5.2
Taskfreak Taskfreak!	Version 0.5.3
Taskfreak Taskfreak!	Version 0.5.4
Taskfreak Taskfreak!	Version 0.5.5
Taskfreak Taskfreak!	Version 0.5.6
Taskfreak Taskfreak!	Version 0.5.7
Taskfreak Taskfreak!	Version 0.6.0
Taskfreak Taskfreak!	Version 0.6.1
Taskfreak Taskfreak!	Version 0.6.2