CVE-2006-3398 | BDVDB-2026-17944 Detail

Description#

The "change password forms" in Taskjitsu before 2.0.1 includes password hashes in hidden form fields, which allows remote attackers to obtain sensitive information from the (1) Category Editor and (2) User Information editor.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.pkrinternet.com/download/RELEASE-NOTES.txt
https://www.pkrinternet.com/taskjitsu/task/3400
http://www.vupen.com/english/advisories/2006/2660

Exploit#

No public exploit known

History#

Version 12006-07-06Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.