The Chatroom Module before 4.7.x.-1.0 for Drupal displays private messages in a chatroom's last messages overview, which allows remote attackers to obtain sensitive information by reading the overview.
References
Link | Resource |
---|---|
http://drupal.org/node/102614 | Patch Vendor Advisory |
http://secunia.com/advisories/23343 | Patch Vendor Advisory |
Configurations
Information
Published : 2006-12-13 17:28
Updated : 2008-09-05 14:14
NVD link : CVE-2006-6529
Mitre link : CVE-2006-6529
JSON object : View
CWE
Products Affected
drupal
- chatroom_module