CVE-2006-6995

Medium

6/10

Summary

mycontacts.php in V3 Chat allows remote authenticated users to gain privileges as other users via a modified membername parameter.

Access Complexity: MEDIUM
AccessVector: NETWORK
Authentication: SINGLE
Integrity Impact: PARTIAL
Confidentiality Impact: PARTIAL
Availability Impact: PARTIAL

References

Advisory Timeline

Published Feb 12, 2007