CVE-2006-3429

Cross-site scripting XSS vulnerability in TigerTom TTCalc 1.0 allows remote attackers to inject arbitrary web script or HTML via the currency parameter in 1 loan.php and 2 mortgage.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informati...

CVE-2006-3429

CVE-2006-3429 describes a cross‑site scripting (XSS) vulnerability in TigerTom TTCalc 1.0. The flaw allows remote attackers to inject arbitrary web script or HTML through the currency parameter in the pages loan.php and mortgage.php. The affected component is TTCalc’s web interface; the root caus...