CVE-2006-3428

TigerTom TTCalc 1.0 is affected by a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML through the year parameter in loan.php and mortgage.php. Root cause: unsanitized input reflected in responses, per CVE-2006-3428. Impact: browser-scrip...

CVE-2006-3429

CVE-2006-3429 describes a cross‑site scripting (XSS) vulnerability in TigerTom TTCalc 1.0. The flaw allows remote attackers to inject arbitrary web script or HTML through the currency parameter in the pages loan.php and mortgage.php. The affected component is TTCalc’s web interface; the root caus...