3 matches found
PT-2021-11205
Name of the Vulnerable Software and Affected Versions: Advanced Webhost Billing System version 3.7.0 Description: The issue allows Cross Site Request Forgery CSRF attacks, which can lead to the deletion of a contact from the My Additional Contact page. Recommendations: For Advanced Webhost Billin...
Code injection
phpCOIN 1.2.3 and earlier stores messages based upon e-mail addresses, which allows remote authenticated users to read messages for other users by adding the sender's e-mail address as an "additional contact"...
CVE-2006-2422: Undefined Security Weakness
phpCOIN 1.2.3 and earlier stores messages based upon e-mail addresses, which allows remote authenticated users to read messages for other users by adding the sender's e-mail address as an "additional contact"...