CVE Vulnerabilities

CVE-2006-2422

Published: May 17, 2006 | Modified: Jul 20, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

phpCOIN 1.2.3 and earlier stores messages based upon e-mail addresses, which allows remote authenticated users to read messages for other users by adding the senders e-mail address as an additional contact.

Affected Software

Name Vendor Start Version End Version
Phpcoin Coinsoft_technologies 1.2.2 1.2.2
Phpcoin Coinsoft_technologies 1.2.1 1.2.1
Phpcoin Coinsoft_technologies 1.2.1b 1.2.1b
Phpcoin Coinsoft_technologies 1.2 1.2

References