CVE-2006-6529: Drupal Chatroom Module

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

The Chatroom Module before 4.7.x.-1.0 for Drupal displays private messages in a chatroom's last messages overview, which allows remote attackers to obtain sensitive information by reading the overview.

Affected products

• Drupal Chatroom Module: version 4.7 only

Published 2006-12-14. Last modified 2026-06-16.