CVE-2006-1479

Multiple cross-site scripting (XSS) vulnerabilities in Serge Rey gtd-php (aka Getting Things Done) 0.5 allow remote attackers to inject arbitrary web script or HTML via the Description field in (1) newProject.php, (2) newList.php, and (3) newWaitingOn.php; the Title field in (4) newProject.php, (5) newList.php, (6) newWaitingOn.php, (7) newChecklist.php, (8) newContext.php, and (9) newGoal.php; the (10) Category Name field in newCategory.php; the (11) listTitle field in listReport.php; the (12) projectName field in projectReport.php; and the (13) checklistTitle field in checklistReport.php.

• http://osvdb.org/ref/24/24149-gtd-php.txtExploit
• http://secunia.com/advisories/19512
• http://www.osvdb.org/24149Exploit
• http://www.osvdb.org/24150Exploit
• http://www.osvdb.org/24151Exploit
• http://www.osvdb.org/24152Exploit
• http://www.osvdb.org/24153Exploit
• http://www.osvdb.org/24154Exploit
• http://www.osvdb.org/24155Exploit
• http://www.osvdb.org/24156Exploit
• http://www.osvdb.org/24157Exploit
• http://www.osvdb.org/24158Exploit
• http://www.securityfocus.com/bid/17366
• http://www.vupen.com/english/advisories/2006/1203
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25553
• http://osvdb.org/ref/24/24149-gtd-php.txtExploit
• http://secunia.com/advisories/19512
• http://www.osvdb.org/24149Exploit
• http://www.osvdb.org/24150Exploit
• http://www.osvdb.org/24151Exploit
• http://www.osvdb.org/24152Exploit
• http://www.osvdb.org/24153Exploit
• http://www.osvdb.org/24154Exploit
• http://www.osvdb.org/24155Exploit
• http://www.osvdb.org/24156Exploit
• http://www.osvdb.org/24157Exploit
• http://www.osvdb.org/24158Exploit
• http://www.securityfocus.com/bid/17366
• http://www.vupen.com/english/advisories/2006/1203
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25553

Published

Mar 29, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-1473Integer overflow in AFP Server for Apple Mac OS X 10.3.9 and…
• CVE-2006-1474Cross-site scripting (XSS) vulnerability in the "failed" fun…
• CVE-2006-1475Windows Firewall in Microsoft Windows XP SP2 does not produc…
• CVE-2006-1476Windows Firewall in Microsoft Windows XP SP2 produces incorr…
• CVE-2006-1477Multiple PHP remote file inclusion vulnerabilities in Turnke…
• CVE-2006-1478Directory traversal vulnerability in (1) initiate.php and (2…
• CVE-2006-1480Directory traversal vulnerability in start.php in WebAlbum 2…
• CVE-2006-1481SQL injection vulnerability in search.php in PHP Ticket 0.71…
• CVE-2006-1482Cross-site scripting (XSS) vulnerability in index.php in Con…
• CVE-2006-1483Blazix Web Server before 1.2.6, when running on Windows, all…
• CVE-2006-1484Genius VideoCAM NB Driver does not drop privileges when savi…
• CVE-2006-1485gm-upload.cgi in Greymatter 1.3.1 allows remote authenticate…