CVE-2006-3365

V3 Chat allows remote attackers to obtain the installation path via (1) an invalid id parameter to mail/index.php or (2) membername parameter to…

published July 6, 2006

CVSS
—
EPSS
1%
Percentile
73.3
In the wild
Unconfirmed
What it is

V3 Chat allows remote attackers to obtain the installation path via (1) an invalid id parameter to mail/index.php or (2) membername parameter to messenger/online.php, which displays the path in an error page due to an incorrect SQL statement.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01457 · 73.3th percentile
Published
2006-07-06T20:00Z
EPSS history
Timeline
  • 06 JUL 20:00Z
    V3 Chat allows remote attackers to obtain the installation path via (1) an invalid id parameter to mail/index.php or (2) membername parameter to…
    cvelistv5