Vulnerability CVE-2006-3398
Published: 2006-07-06   Modified: 2012-02-12

Description:
The "change password forms" in Taskjitsu before 2.0.1 includes password hashes in hidden form fields, which allows remote attackers to obtain sensitive information from the (1) Category Editor and (2) User Information editor.

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:N/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5/10
2.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
None
None
Affected software
Pkr internet -> Taskjitsu 

 References:
https://www.pkrinternet.com/taskjitsu/task/3400
http://www.vupen.com/english/advisories/2006/2660
http://www.pkrinternet.com/download/RELEASE-NOTES.txt
Copyright 2024, cxsecurity.com

 

Back to Top