CVE-2015-6512

Name of the Vulnerable Software and Affected Versions FreiChat version 9.6

Description The issue concerns a SQL injection vulnerability in the get messages function. This vulnerability allows remote attackers to execute arbitrary SQL commands via the time parameter to the "server/freichat.php" endpoint.

Recommendations For FreiChat version 9.6, consider restricting access to the get messages function in server/plugins/chatroom/chatroom.php until a patch is available. Avoid using the time parameter in the affected endpoint to minimize the risk of exploitation.