Unknown · Taskfreak! · CVE-2008-0270
**Name of the Vulnerable Software and Affected Versions**
TaskFreak! versions 0.6.1 and earlier
**Description**
The issue allows remote authenticated users to execute arbitrary SQL commands via the `sContext` parameter in the "index.php" file.
**Recommendations**
For TaskFreak! versions 0.6.1 and earlier, avoid using the `sContext` parameter in the index.php file until a fix is available. As a temporary workaround, consider restricting access to the index.php file to minimize the risk of exploitation.