CVE-2006-2422: Coinsoft Technologies Phpcoin

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

phpCOIN 1.2.3 and earlier stores messages based upon e-mail addresses, which allows remote authenticated users to read messages for other users by adding the sender's e-mail address as an "additional contact".

Affected products

• Coinsoft Technologies Phpcoin: version 1.2 only; version 1.2.1 only; version 1.2.1b only; version 1.2.2 only

Published 2006-05-17. Last modified 2026-06-16.