CVE-2015-6512

Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 18/08/2015 Updated: 19/08/2015

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

SQL injection vulnerability in the get_messages function in server/plugins/chatroom/chatroom.php in FreiChat 9.6 allows remote malicious users to execute arbitrary SQL commands via the time parameter to server/freichat.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
codelogic freichat 9.6

/* # Exploit Title: FreiChat 96 SQL Injection # Date: 27-11-2014 # Software Link: codologiccom/page/freichat-free-php-chat-script-software # Exploit Author: Kacper Szurek # Contact: twittercom/KacperSzurek # Website: securityszurekpl/ # Category: webapps 1 Description $_GET['time'] is not escaped File: freichat\serv ...

CWE-89 https://www.exploit-db.com/exploits/37592/http://packetstormsecurity.com/files/132673/FreiChat-9.6-SQL-Injection.html http://security.szurek.pl/freichat-96-sql-injection.html https://nvd.nist.gov https://www.exploit-db.com/exploits/37592/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2015-6512

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect