CVE-2006-1428

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-03-28 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in phpCOIN 1.2.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the fs parameter to (1) mod.php or (2) mod_print.php.

Affected products

Coinsoft Technologies Phpcoin: 1.1.0, 1.1.1, 1.2.0, 1.2.1, 1.2.2

References

http://pridels0.blogspot.com/2006/03/phpcoin-v122-xss-vuln.html
http://secunia.com/advisories/19419
http://www.osvdb.org/24188
http://www.osvdb.org/24189
http://www.securityfocus.com/bid/17279
http://www.vupen.com/english/advisories/2006/1129
https://exchange.xforce.ibmcloud.com/vulnerabilities/25492
http://pridels0.blogspot.com/2006/03/phpcoin-v122-xss-vuln.html
http://secunia.com/advisories/19419
http://www.osvdb.org/24188
http://www.osvdb.org/24189
http://www.securityfocus.com/bid/17279

Get alerted when CVE-2006-1428 or the next vulnerability affects your stack