Skip to content
Fencer Vulns
low 2.6

CVE-2006-3366 json

Multiple cross-site scripting (XSS) vulnerabilities in V3 Chat allow remote attackers to inject arbitrary web script or HTML via crafted HT…

published 2006-07-06 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-3362

cvss
2.6
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
1.9%
EPSS 1.9% chance of exploitation in 30 days, percentile 79%
public exploits
7
Exploit-DB

Summary

Multiple cross-site scripting (XSS) vulnerabilities in V3 Chat allow remote attackers to inject arbitrary web script or HTML via crafted HTML tags, as demonstrated by the IMG tag, in the (1) id parameter in (a) mail/index.php and (b) mail/reply.php; (2) login_id parameter in (c) members/is_online.php; (3) site_id parameter in (d) messenger/online.php, (e) messenger/search.php, and (f) messenger/profile.php; (4) contact_name parameter in messenger/search.php; (5) membername parameter in (g) messenger/profileview.php; (6) unspecified parameters used when "editing a profile"; and (7) cust_name parameter in (h) messenger/expire.php. NOTE: The vendor disputes the vectors involving files in the messenger directory, stating "... the referenced folder 'messenger' was never available to the general public...".

Timeline

  1. First public exploit (EDB-28074)
  2. Published

Exploit prediction

1.85% chance of exploitation in the next 30 days, higher than 79% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • EDB-28074 V3 Chat Instant Messenger - 'expire.php?cust_name' Cross-Site Scripting webapps, 2006-06-20
  • EDB-28073 V3 Chat Instant Messenger - 'profileview.php?membername' Cross-Site Scripting webapps, 2006-06-20
  • EDB-28072 V3 Chat Instant Messenger - 'profile.php?site_id' Cross-Site Scripting webapps, 2006-06-20
  • EDB-28071 V3 Chat Instant Messenger - 'search.php' Multiple Cross-Site Scripting Vulnerabilities webapps, 2006-06-20
  • EDB-28070 V3 Chat Instant Messenger - 'online.php?site_id' Cross-Site Scripting webapps, 2006-06-20
  • EDB-28069 V3 Chat Instant Messenger - '/mail/reply.php?id' Cross-Site Scripting webapps, 2006-06-20
  • EDB-28068 V3 Chat Instant Messenger - '/mail/index.php?id' Cross-Site Scripting webapps, 2006-06-20
  • securitytracker.com http://securitytracker.com/id?1016340 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
NVD 2.0 2.6 AV:N/AC:H/Au:N/C:N/I:P/A:N

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.