CVE-2006-6528 | BDVDB-2026-20921 Detail

Description#

The Chatroom Module before 4.7.x.-1.0 for Drupal broadcasts Chatroom visitors' session IDs to all participants, which allows remote attackers to hijack sessions and gain privileges.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.vupen.com/english/advisories/2006/4942
http://secunia.com/advisories/23343
http://drupal.org/node/102614

Exploit#

No public exploit known

History#

Version 12006-12-14Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.