3 matches found
Sql injection
SQL injection vulnerability in the getmessages function in server/plugins/chatroom/chatroom.php in FreiChat 9.6 allows remote attackers to execute arbitrary SQL commands via the time parameter to server/freichat.php...
PT-2015-7276
Name of the Vulnerable Software and Affected Versions FreiChat version 9.6 Description The issue concerns a SQL injection vulnerability in the get messages function. This vulnerability allows remote attackers to execute arbitrary SQL commands via the time parameter to the "server/freichat.php"...
CVE-2015-6512: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the getmessages function in server/plugins/chatroom/chatroom.php in FreiChat 9.6 allows remote attackers to execute arbitrary SQL commands via the time parameter to server/freichat.php...