CVE-2006-2422
phpCOIN 1.2.3 and earlier stores messages based upon e-mail addresses, which allows remote authenticated users to read messages for other users by adding the sender's e-mail add…
Published: 2006-05-17 · CVSS: Unscored
phpCOIN 1.2.3 and earlier stores messages based upon e-mail addresses, which allows remote authenticated users to read messages for other users by adding the sender's e-mail address as an "additional contact".
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7