CVE-2006-6995

mycontacts.php in V3 Chat allows remote authenticated users to gain privileges as other users via a modified membername parameter...

CVE-2006-6995

The CVE-2006-6995 issue affects V3 Chat’s mycontacts.php where an authenticated user can alter the membername parameter to gain privileges of another user. The vulnerability is described as a privilege escalation via parameter tampering, enabling access to other user accounts. Sources cited in th...