CVE-2006-6995
mycontacts.php in V3 Chat allows remote authenticated users to gain privileges as other users via...
mycontacts.php in V3 Chat allows remote authenticated users to gain privileges as other users via a modified membername parameter.
Exploit likelihood
What each source reports
NVD Score used
mycontacts.php in V3 Chat allows remote authenticated users to gain privileges as other users via a modified membername parameter.
- Record
CVE-2006-6995- CVSS 2.0
- 6.0 Medium
AV:N/AC:M/Au:S/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
mycontacts.php in V3 Chat allows remote authenticated users to gain privileges as other users via a modified membername parameter.
- Record
CVE-2006-6995- Updated
- 2026-11-02
EUVDEUVD-2006-6977 No score
mycontacts.php in V3 Chat allows remote authenticated users to gain privileges as other users via a modified membername parameter.
- Record
EUVD-2006-6977- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2jvj-2rqx-36qc No score
mycontacts.php in V3 Chat allows remote authenticated users to gain privileges as other users via...
mycontacts.php in V3 Chat allows remote authenticated users to gain privileges as other users via a modified membername parameter.
- Record
GHSA-2jvj-2rqx-36qc- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | V3 Chat Instant Messenger - 'mycontacts.php' membername Arbitrary User Buddy List Manipulation | 2006-06-20 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-6995 is a medium vulnerability (CVSS 6.0) in V3 Chat V3chat Instant Messenger, published February 12, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.62%, the 76th percentile. No source names a fixed version.