Description
Cross-site scripting (XSS) vulnerability in logout.php in TaskFreak! Original multi user before 0.6.4 allows remote attackers to inject arbitrary web script or HTML via the tznMessage parameter.
References
- 40025 third-party-advisory
- 20100629 Secunia Research: TaskFreak "tznMessage" Cross-Site Scripting Vulnerability mailing-list
- http://www.taskfreak.com/original/versions
- 65846 vdb-entry
- 41221 vdb-entry
- http://secunia.com/secunia_research/2010-78/