Vulnerabilities > CVE-2006-6995 - Unspecified vulnerability in V3 Chat V3Chat Instant Messenger

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
v3-chat
exploit available

Summary

mycontacts.php in V3 Chat allows remote authenticated users to gain privileges as other users via a modified membername parameter.

Vulnerable Configurations

Part Description Count
Application
V3_Chat
1

Exploit-Db

descriptionV3 Chat Instant Messenger mycontacts.php membername Arbitrary User Buddy List Manipulation. CVE-2006-6995. Webapps exploit for php platform
idEDB-ID:28075
last seen2016-02-03
modified2006-06-20
published2006-06-20
reporterLuny
sourcehttps://www.exploit-db.com/download/28075/
titleV3 Chat Instant Messenger - mycontacts.php membername Arbitrary User Buddy List Manipulation