Unrated severityNVD Advisory· Published Dec 14, 2006· Updated Jun 16, 2026
CVE-2006-6528
CVE-2006-6528
Description
The Chatroom Module before 4.7.x.-1.0 for Drupal broadcasts Chatroom visitors' session IDs to all participants, which allows remote attackers to hijack sessions and gain privileges.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:drupal:chatroom_module:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:drupal:chatroom_module:*:*:*:*:*:*:*:*range: <=4.7
- (no CPE)range: <= 4.7.x-1.0
Patches
Vulnerability mechanics
References
3- secunia.com/advisories/23343nvdVendor Advisory
- drupal.org/node/102614nvd
- www.vupen.com/english/advisories/2006/4942nvd
News mentions
0No linked articles in our index yet.