CVE-2006-1428

2006-03-2820:00:00

mitre

www.cve.org

5.8 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.5%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in phpCOIN 1.2.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the fs parameter to (1) mod.php or (2) mod_print.php.

References

pridels0.blogspot.com/2006/03/phpcoin-v122-xss-vuln.html

secunia.com/advisories/19419

www.osvdb.org/24188

www.osvdb.org/24189

www.securityfocus.com/bid/17279

www.vupen.com/english/advisories/2006/1129

exchange.xforce.ibmcloud.com/vulnerabilities/25492