Taskfreak

9 CVEs across 3 Taskfreak products. Browse Taskfreak vulnerabilities, severities, and proof-of-concept exploits.

Taskfreak products with known CVEs

ProductCVEs
Taskfreak4
Taskfreak\!4
Taskfreak\! Multi-Mysql1
Taskfreak CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2011-38052011-09-24TaskFreak! multi-mysql-0.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in…
CVE-2011-10622011-02-23Multiple cross-site scripting (XSS) vulnerabilities in include/html/header.php in TaskFreak! 0.6.4 allow remote attackers to inject arbitrary web script or HTM…
CVE-2010-15212010-06-30SQL injection vulnerability in include/classes/tzn_user.php in TaskFreak! Original multi user before 0.6.4 allows remote attackers to execute arbitrary SQL com…
CVE-2010-15202010-06-30Cross-site scripting (XSS) vulnerability in logout.php in TaskFreak! Original multi user before 0.6.4 allows remote attackers to inject arbitrary web script or…
CVE-2010-15832010-05-06SQL injection vulnerability in the loadByKey function in the TznDbConnection class in tzn_mysql.php in Tirzen (aka TZN) Framework 1.5, as used in TaskFreak! be…
CVE-2008-02702008-01-15SQL injection vulnerability in index.php in TaskFreak! 0.6.1 and earlier allows remote authenticated users to execute arbitrary SQL commands via the sContext p…
CVE-2007-11982007-03-02Cross-site scripting (XSS) vulnerability in TaskFreak! before 0.5.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, pos…
CVE-2006-70972007-03-02Multiple unspecified vulnerabilities in TaskFreak! before 0.1.4 have unknown impact and attack vectors.
CVE-2007-09822007-02-16Cross-site scripting (XSS) vulnerability in error.php in TaskFreak! 0.5.5 allows remote attackers to inject arbitrary web script or HTML via the tznMessage par…