CVE-2006-3428

TigerTom TTCalc 1.0 is affected by a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML through the year parameter in loan.php and mortgage.php. Root cause: unsanitized input reflected in responses, per CVE-2006-3428. Impact: browser-scrip...