SQL Injection Vulnerability in FreiChat 9.6: Remote Code Execution via get_messages Function

CVE-2015-6512 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

SQL injection vulnerability in the get_messages function in server/plugins/chatroom/chatroom.php in FreiChat 9.6 allows remote attackers to execute arbitrary SQL commands via the time parameter to server/freichat.php.

Learn more about our Cis Benchmark Audit For Server Software.