EUVD-2015-6452

Malware in sbrugna...

EUVD-2013-5784

Malware in sbrugna...

EUVD-2010-4913

Malware in sbrugna...

CVE-2015-6512

SQL injection vulnerability in the getmessages function in server/plugins/chatroom/chatroom.php in FreiChat 9.6 allows remote attackers to execute arbitrary SQL commands via the time parameter to server/freichat.php...

FreiChat component SQL injection vulnerability in Joomla!

Joomla! is an open source content management system CMS developed by the Open Source Matters team in the U.S. The system provides RSS feeds, site search, etc. Freichat comfreichat is one of the Web-based chat program component. An SQL injection vulnerability exists in the 'getmessages' function i...

CVE-2015-6512

SQL injection vulnerability in the getmessages function in server/plugins/chatroom/chatroom.php in FreiChat 9.6 allows remote attackers to execute arbitrary SQL commands via the time parameter to server/freichat.php...

Sql injection

SQL injection vulnerability in the getmessages function in server/plugins/chatroom/chatroom.php in FreiChat 9.6 allows remote attackers to execute arbitrary SQL commands via the time parameter to server/freichat.php...

CVE-2015-6512

CVE-2015-6512 describes a SQL injection in FreiChat 9.6 via the time parameter to server/freichat.php, in the get_messages function of server/plugins/chatroom/chatroom.php. The vulnerability arises from inadequate input filtering, allowing remote attackers to execute arbitrary SQL commands. Sever...

CVE-2015-6512

SQL injection vulnerability in the getmessages function in server/plugins/chatroom/chatroom.php in FreiChat 9.6 allows remote attackers to execute arbitrary SQL commands via the time parameter to server/freichat.php...

PT-2015-7276

Name of the Vulnerable Software and Affected Versions FreiChat version 9.6 Description The issue concerns a SQL injection vulnerability in the get messages function. This vulnerability allows remote attackers to execute arbitrary SQL commands via the time parameter to the "server/freichat.php"...

CVE-2015-6512: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the getmessages function in server/plugins/chatroom/chatroom.php in FreiChat 9.6 allows remote attackers to execute arbitrary SQL commands via the time parameter to server/freichat.php...

FreiChat 9.6 - SQL Injection

FreiChat 9.6 - SQL Injection / Exploit Title: FreiChat 9.6 SQL Injection Date: 27-11-2014 Software Link: http://codologic.com/page/freichat-free-php-chat-script-software Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1...

FreiChat 9.6 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: FreiChat 9.6 SQL Injection Date: 27-11-2014 Software Link: http://codologic.com/page/freichat-free-php-chat-script-software Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.p...

CVE-2013-5952

Multiple cross-site scripting XSS vulnerabilities in the Freichat comfreichat component, possibly 9.4 and earlier, for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 id or 2 xhash parameter to client/chat.php or 3 toname parameter to client/plugins/upload/upload.p...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Freichat comfreichat component, possibly 9.4 and earlier, for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 id or 2 xhash parameter to client/chat.php or 3 toname parameter to client/plugins/upload/upload.p...

CVE-2013-5952

Multiple cross-site scripting XSS vulnerabilities in the Freichat comfreichat component, possibly 9.4 and earlier, for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 id or 2 xhash parameter to client/chat.php or 3 toname parameter to client/plugins/upload/upload.p...

CVE-2013-5952

CVE-2013-5952 affects the Freichat (com_freichat) Joomla! component (likely 9.4 and earlier). The vulnerability is multiple XSS flaws triggered via user-supplied input: id or xhash parameters to client/chat.php, or toname parameter to client/plugins/upload/upload.php. Root cause: input not proper...

CVE-2013-5952: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Freichat comfreichat component, possibly 9.4 and earlier, for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 id or 2 xhash parameter to client/chat.php or 3 toname parameter to client/plugins/upload/upload.p...

PT-2014-3004

Name of the Vulnerable Software and Affected Versions Joomla! Freichat com freichat component versions prior to 9.4 Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters to certain PHP files. This can be achieved by manipulating the id or xha...

Joomla! FreiChat组件"id"跨站脚本漏洞

CVE ID：CVE-2013-5952 Joomla!是一款内容管理系统。 由于通过"id" GET参数传递到client/chat.php的输入在被返回用户前没有正确过滤，攻击者可以利用漏洞在受影响站点上下文的用户浏览器会话中执行任意HTML和脚本代码。 0 FreiChat 9.x component for Joomla! 目前没有详细解决方案提供： http://www.joomla.org...