CVE-2006-3365: v3 Chat

Low severity, CVSS 2.6. EPSS: 1.5% chance of exploitation in the next 30 days.

V3 Chat allows remote attackers to obtain the installation path via (1) an invalid id parameter to mail/index.php or (2) membername parameter to messenger/online.php, which displays the path in an error page due to an incorrect SQL statement.

Affected products

• v3 Chat v3 Chat: version beta only

Published 2006-07-06. Last modified 2026-06-16.