CVE:CVE-2010-1520
CNNVD:CNNVD-201006-476
TaskFreak! 是一个开放源代码, ajax效果界面, 用PHP编写的任务管理/待办事项列表工具。 
TaskFreak! Original multi user 0.6.4以前的版本的logout.php中存在跨站脚本攻击漏洞。远程攻击者可以通过tznMessage参数注入任意web脚本或者HTML。
solution:Upgrade taskfreak taskfreak! to a higher version than 0.6.3,0.1,0.1.2,0.1.3,0.1.4,0.2.0,0.2.1,0.2.2,0.3.0,0.3.1,0.3.2,0.4.0,0.4.1,0.4.2,0.5.0,0.5.1,0.5.2,0.5.3,0.5.4,0.5.5,0.5.6,0.5.7,0.6.0,0.6.1,0.6.2,and avoid the version (,0.6.3],0.1,0.1.2,0.1.3,0.1.4,0.2.0,0.2.1,0.2.2,0.3.0,0.3.1,0.3.2,0.4.0,0.4.1,0.4.2,0.5.0,0.5.1,0.5.2,0.5.3,0.5.4,0.5.5,0.5.6,0.5.7,0.6.0,0.6.1,0.6.2