CVE-2006-3397

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-07-06 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in Taskjitsu before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters, including the (1) title and (2) description parameters when creating a task.

Affected products

Pkr Internet Taskjitsu: 0.1, 2.0

References

http://secunia.com/advisories/20912
http://www.pkrinternet.com/download/RELEASE-NOTES.txt
http://www.securityfocus.com/bid/18818
http://www.vupen.com/english/advisories/2006/2660
https://exchange.xforce.ibmcloud.com/vulnerabilities/27533
https://www.pkrinternet.com/taskjitsu/task/3313
http://secunia.com/advisories/20912
http://www.pkrinternet.com/download/RELEASE-NOTES.txt
http://www.securityfocus.com/bid/18818
http://www.vupen.com/english/advisories/2006/2660
https://exchange.xforce.ibmcloud.com/vulnerabilities/27533
https://www.pkrinternet.com/taskjitsu/task/3313

Get alerted when CVE-2006-3397 or the next vulnerability affects your stack