CVE-2006-1428: Multiple cross-site scripting (XSS) vulnerabilities in phpCOIN 1.2.2 and earlier allow remote attackers to...

Security readout for executives and security teams

CVE-2006-1428 is an old cross-site scripting issue in phpCOIN 1.2.2 and earlier. If the application is still exposed, an attacker could cause a user's browser to run attacker-supplied script or HTML through affected phpCOIN pages. Business urgency depends on whether legacy phpCOIN remains internet-facing. Exposure is likely limited to organizations still running phpCOIN 1.2.2 or earlier, especially public administrative, billing, or customer-facing deployments. The bundle does not identify CPEs or a maintained vendor advisory, so asset inventory is the primary exposure check. Treat this as a legacy-application exposure issue. It is not KEV-listed and has no provided CVSS score, but public-facing obsolete phpCOIN instances could create session theft, phishing, or customer trust risk. Prioritize inventory and retirement decisions. Mitigation focus: Inventory internet-facing systems for phpCOIN 1.2.2 or earlier.; Check vendor or project guidance before selecting an update path.; Retire or isolate unsupported phpCOIN deployments if no supported fix exists..

Prepared

Jun 29, 2026, 13:35 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.