Unscored CVE-2006-3428 EUVD-2006-3424GHSA-2h35-j3ph-hx4j

Cross-site scripting (XSS) vulnerability in TigerTom TTCalc 1.0 allows remote attackers to inject arbitrary web script or HTML via the year…

Published Jul 7, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in TigerTom TTCalc 1.0 allows remote attackers to inject arbitrary web script or HTML via the year parameter in (1) loan.php and (2) mortgage.php.

References

20060705 TigerTom Scripts mailing-list
tigertom-multiple-fields-xss(27563) vdb-entry
27036 vdb-entry
27035 vdb-entry
ADV-2006-2692 vdb-entry
18844 vdb-entry
20952 third-party-advisory