CVE-2015-6512

SQL injection vulnerability in the getmessages function in server/plugins/chatroom/chatroom.php in FreiChat 9.6 allows remote attackers to execute arbitrary SQL commands via the time parameter to server/freichat.php...

Secure Science Corporation Application Software Advisory 055

Secure Science Corporation Advisory ASA-055 http://www.securescience.net [email protected] 877-570-0455 --------------------------------------------------------- PHPROJEKT 4.2 Chatroom is vulnerable to Cross-Site Scripting XSS attacks allowing a "broadcast" attack to users in the...