CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

25 matches found

NVD•added 2020/07/07 7:15 p.m.•18 views

CVE-2019-20896

WebChess 1.0 allows SQL injection via the messageFrom, gameID, opponent, messageID, or to parameter...

9.8CVSS0.0099EPSS

Exploits0References1

OSV•added 2020/07/07 7:15 p.m.•2 views

CVE-2019-20896

WebChess 1.0 allows SQL injection via the messageFrom, gameID, opponent, messageID, or to parameter...

9.8CVSS7.3AI score0.0099EPSS

Exploits0References1

Prion•added 2020/07/07 7:15 p.m.•11 views

Sql injection

WebChess 1.0 allows SQL injection via the messageFrom, gameID, opponent, messageID, or to parameter...

7.5CVSS9.8AI score0.0099EPSS

Exploits0References1Affected Software1

CVE•added 2020/07/07 6:11 p.m.•70 views

CVE-2019-20896

CVE-2019-20896 affects WebChess 1.0 and involves an SQL injection vulnerability exposed through the parameters: messageFrom, gameID, opponent, messageID, or to. The issue stems from insufficient input validation/parameter handling in WebChess 1.0, enabling an attacker to inject and execute arbitr...

9.8CVSS9.7AI score0.0099EPSS

Exploits0References1Affected Software1