Lucene search

[email protected]CVE-2006-1428

HistoryMar 28, 2006 - 8:02 p.m.

CVE-2006-1428

2006-03-2820:02:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve

2006

1428

xss

vulnerabilities

phpcoin

mod.php

mod_print.php

nvd

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.006 Low

EPSS

Percentile

79.2%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in phpCOIN 1.2.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the fs parameter to (1) mod.php or (2) mod_print.php.

CPENameOperatorVersion
coinsoft_technologies:phpcoincoinsoft technologies phpcoineq1.1.0
coinsoft_technologies:phpcoincoinsoft technologies phpcoineq1.2.2
coinsoft_technologies:phpcoincoinsoft technologies phpcoineq1.2.1
coinsoft_technologies:phpcoincoinsoft technologies phpcoineq1.1.1
coinsoft_technologies:phpcoincoinsoft technologies phpcoineq1.2.0

CPE	Name	Operator	Version
coinsoft_technologies:phpcoin	coinsoft technologies phpcoin	eq	1.1.0
coinsoft_technologies:phpcoin	coinsoft technologies phpcoin	eq	1.2.2
coinsoft_technologies:phpcoin	coinsoft technologies phpcoin	eq	1.2.1
coinsoft_technologies:phpcoin	coinsoft technologies phpcoin	eq	1.1.1
coinsoft_technologies:phpcoin	coinsoft technologies phpcoin	eq	1.2.0

References

pridels0.blogspot.com/2006/03/phpcoin-v122-xss-vuln.html

secunia.com/advisories/19419

www.osvdb.org/24188

www.osvdb.org/24189

www.securityfocus.com/bid/17279

www.vupen.com/english/advisories/2006/1129

exchange.xforce.ibmcloud.com/vulnerabilities/25492

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.006 Low

EPSS

Percentile

79.2%

JSON

Related for CVE-2006-1428

prion1