CVE-2015-6512: Codelogic Freichat

Medium severity, CVSS 5.0. EPSS: 2.5% chance of exploitation in the next 30 days.

SQL injection vulnerability in the get_messages function in server/plugins/chatroom/chatroom.php in FreiChat 9.6 allows remote attackers to execute arbitrary SQL commands via the time parameter to server/freichat.php.

Affected products

• Codelogic Freichat: version 9.6 only

Published 2015-08-18. Last modified 2026-06-17.