CVE-2006-6529

CVE-2006-6529 affects the Drupal Chatroom Module in versions before 4.7.x-1.0. The vulnerability arises because the module displays private messages in the chatroom’s last messages overview, allowing remote attackers to read sensitive information via the overview. Impact: information disclosure o...

CVE-2006-6528

CVE-2006-6528 affects the Drupal Chatroom Module (versions before 4.7.x.-1.0). The vulnerability arises because the module broadcasts visitors’ session IDs to all participants, enabling remote attackers to hijack sessions and gain privileges. The published description explicitly states the impact...