Lucene search
China National Vulnerability DatabaseCNVD-2023-64111HistoryAug 17, 2023 - 12:00 a.m.
WebChess SQL Injection Vulnerability (CNVD-2023-64111)
2023-08-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
webchess
sql injection
mainmenu.php
data theft
vulnerability
EPSS
0.001
Percentile
48.4%
WebChess is a web-based online chess game. A SQL injection vulnerability exists in webchess v1.0, which originates from the lack of validation of the $playerID parameter in mainmenu.php against external SQL input. This vulnerability can be exploited by attackers to execute illegal SQL commands to steal sensitive database data.
Related
cvelist
cvelist
CVE-2023-39851
2023-08-15 00:00:00
prion
prion
Sql injection
2023-08-15 22:15:00
cve
cve
CVE-2023-39851
2023-08-15 22:15:14
nvd
nvd
CVE-2023-39851
2023-08-15 22:15:14