CVE-2006-1400: Cross-site scripting (XSS) vulnerability in MyTasks/PersonalTaskEdit.asp in Metisware Instructor 1.3 and ea...

Security readout for executives and security teams

CVE-2006-1400 is a cross-site scripting issue in Metisware Instructor 1.3 and earlier. If the affected task-edit page is reachable, an attacker could cause script or HTML to run in a user’s browser through the Task parameter. Business urgency depends on whether this old product is still deployed. Exposure is most likely in legacy environments still running Metisware Instructor 1.3 or earlier, especially if the MyTasks ASP pages are reachable by users or the internet. The source bundle’s structured affected-product data is incomplete. Prioritize discovery first. This is an old, niche product issue with incomplete severity data, but any still-exposed deployment could create user-session and data-integrity risk through browser-side script execution. Mitigation focus: Confirm whether Metisware Instructor 1.3 or earlier is still deployed.; Check vendor or archived advisory guidance for available updates or workarounds.; Restrict access to affected ASP pages if the application cannot be retired..

Prepared

Jun 29, 2026, 13:35 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.