CVE-2023-22959

WebChess through 0.9.0 and 1.0.0.rc2 allows SQL injection: mainmenu.php, chess.php, and opponentspassword.php txtFirstName, txtLastName...

CVE-2023-22959

WebChess through 0.9.0 and 1.0.0.rc2 allows SQL injection: mainmenu.php, chess.php, and opponentspassword.php txtFirstName, txtLastName...

WebChess SQL Injection Vulnerability

WebChess is a web-based online chess game. A SQL injection vulnerability exists in WebChess version 1.0. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit this vulnerability to execute illegal SQL command...

CVE-2019-20896

WebChess 1.0 allows SQL injection via the messageFrom, gameID, opponent, messageID, or to parameter...

CVE-2019-20896

WebChess 1.0 allows SQL injection via the messageFrom, gameID, opponent, messageID, or to parameter...

Sql injection

WebChess 1.0 allows SQL injection via the messageFrom, gameID, opponent, messageID, or to parameter...

CVE-2019-20896

WebChess 1.0 allows SQL injection via the messageFrom, gameID, opponent, messageID, or to parameter...

CVE-2019-20896

CVE-2019-20896 affects WebChess 1.0 and involves an SQL injection vulnerability exposed through the parameters: messageFrom, gameID, opponent, messageID, or to. The issue stems from insufficient input validation/parameter handling in WebChess 1.0, enabling an attacker to inject and execute arbitr...

CVE-2019-20896: Improper Neutralization of Special Elements used in an SQL Command

WebChess 1.0 allows SQL injection via the messageFrom, gameID, opponent, messageID, or to parameter...

PT-2020-10859

Name of the Vulnerable Software and Affected Versions WebChess version 1.0 Description The issue allows SQL injection via the messageFrom, gameID, opponent, messageID, or to parameter. Recommendations For WebChess version 1.0, as a temporary workaround, consider restricting access to the paramete...