Lucene search

K
cvelistMitreCVELIST:CVE-2023-39851
HistoryAug 15, 2023 - 12:00 a.m.

CVE-2023-39851

2023-08-1500:00:00
mitre
www.cve.org
3
webchess v1.0
sql injection
mainmenu.php
playerid
session variable
server control

EPSS

0.001

Percentile

48.4%

webchess v1.0 was discovered to contain a SQL injection vulnerability via the $playerID parameter at mainmenu.php. NOTE: this is disputed by a third party who indicates that the playerID is a session variable controlled by the server, and thus cannot be used for exploitation.

EPSS

0.001

Percentile

48.4%

Related for CVELIST:CVE-2023-39851