Lucene search
HistoryJul 06, 2006 - 8:05 p.m.
CVE-2006-3365
cve-2006-3365
v3 chat
remote attackers
installation path
sql statement
nvd
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
7.6 High
AI Score
Confidence
Low
0.016 Low
EPSS
Percentile
87.7%
V3 Chat allows remote attackers to obtain the installation path via (1) an invalid id parameter to mail/index.php or (2) membername parameter to messenger/online.php, which displays the path in an error page due to an incorrect SQL statement.
Affected configurations
Node
v3_chatv3_chatMatchbeta
| CPE | Name | Operator | Version |
|---|---|---|---|
| v3_chat:v3_chat | v3 chat | eq | beta |
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
7.6 High
AI Score
Confidence
Low
0.016 Low
EPSS
Percentile
87.7%
Related for CVE-2006-3365