CVE-2006-3365

Published: Jul 6, 2006Modified: Apr 16, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:P/I:N/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

V3 Chat allows remote attackers to obtain the installation path via (1) an invalid id parameter to mail/index.php or (2) membername parameter to messenger/online.php, which displays the path in an error page due to an incorrect SQL statement.

Affected (1)

Products: V3 Chat: V3 Chat

V3 Chat

1 product

V3 Chat

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
V3 Chat V3 Chat	Version beta

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (12)

http://securitytracker.com/id?1016340

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/archive/1/437755/100/200/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/438069/100/200/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/18543

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/2474

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/27395

Source: cve@mitre.org

http://securitytracker.com/id?1016340