V3 Chat Instant Messenger - mycontacts.php membername Arbitrary User Buddy List Manipulation

V3 Chat Instant Messenger - mycontacts.php membername Arbitrary User Buddy List Manipulation source: https://www.securityfocus.com/bid/18543/info V3 Chat Instant Messenger is prone to multiple cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the...