medium5.0
CVE-2006-2422
phpCOIN 1.2.3 and earlier stores messages based upon e-mail addresses, which allows remote authenticated users to read messages for other users by adding the s…
Impact
phpCOIN 1.2.3 and earlier stores messages based upon e-mail addresses, which allows remote authenticated users to read messages for other users by adding the sender's e-mail address as an "additional contact".
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Coinsoft Technologies | Phpcoin | Versions 1.2, 1.2.1, 1.2.1b, 1.2.2 |
References
- NVD record
- CVE.org record
- http://forums.phpcoin.com/index.php?showtopic=5941
- http://secunia.com/advisories/20088
- http://www.securityfocus.com/bid/17959
- http://www.vupen.com/english/advisories/2006/1788
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26499
- http://forums.phpcoin.com/index.php?showtopic=5941
- http://secunia.com/advisories/20088
- http://www.securityfocus.com/bid/17959
- http://www.vupen.com/english/advisories/2006/1788
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26499