Lucene search
+L

216 matches found

exploitpack
exploitpack
added 2006/07/24 12:0 a.m.18 views

Prince Clan Chess Club 0.8 - Include.PCchess.php Remote File Inclusion

Prince Clan Chess Club 0.8 - Include.PCchess.php Remote File Inclusion source: https://www.securityfocus.com/bid/19138/info Prince Clan Chess Club for Mambo is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issu...

0.6AI score
Exploits0
Exploit DB
Exploit DB
added 2006/07/24 12:0 a.m.34 views

Prince Clan Chess Club 0.8 - 'Include.PCchess.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19138/info Prince Clan Chess Club for Mambo is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and...

7AI score
Exploits0
NVD
NVD
added 2006/07/10 8:5 p.m.11 views

CVE-2006-3485

Multiple SQL injection vulnerabilities in AstroDog Press Some Chess 1.5-RC2 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly including the gameID parameter in board.php...

7.5CVSS8.6AI score0.0142EPSS
Exploits1References6
CVE
CVE
added 2006/07/10 8:0 p.m.51 views

CVE-2006-3485

CVE-2006-3485 affects AstroDog Press Some Chess 1.5-RC2 and earlier. The vulnerability is a SQL injection in unspecified vectors, with potential involvement of the gameID parameter in board.php, allowing remote attackers to execute arbitrary SQL commands. Documents do not specify concrete exploit...

7.5CVSS9.1AI score0.0142EPSS
Exploits1References6Affected Software1
Cvelist
Cvelist
added 2006/07/10 8:0 p.m.18 views

CVE-2006-3485

Multiple SQL injection vulnerabilities in AstroDog Press Some Chess 1.5-RC2 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly including the gameID parameter in board.php...

8.6AI score0.0142EPSS
Exploits1References6
NVD
NVD
added 2006/06/28 10:5 p.m.16 views

CVE-2006-3273

Cross-site scripting XSS vulnerability in menu.php in Some Chess 1.5 rc1 allows remote attackers to inject arbitrary web script or HTML via the user parameter "New Name" field...

2.6CVSS5.7AI score0.01269EPSS
Exploits0References6
NVD
NVD
added 2006/06/28 10:5 p.m.19 views

CVE-2006-3272

Cross-site request forgery CSRF vulnerability in menu.php in Some Chess 1.5 rc2 allows remote attackers to conduct actions as another user, such as changing usernames and passwords, via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained from third...

5CVSS6.7AI score0.01024EPSS
Exploits0References2
CVE
CVE
added 2006/06/28 10:0 p.m.46 views

CVE-2006-3273

The CVE-2006-3273 entry documents a Cross-site Scripting (XSS) vulnerability in menu.php of Some Chess 1.5 rc1, exploitable via the user parameter in the “New Name” field. The affected component is menu.php within Some Chess 1.5 rc1; the underlying cause is input that is not properly sanitized, e...

2.6CVSS5.9AI score0.01269EPSS
Exploits0References6Affected Software1
CVE
CVE
added 2006/06/28 10:0 p.m.55 views

CVE-2006-3272

CVE-2006-3272 describes a Cross-site request forgery (CSRF) in Some Chess 1.5 rc2 affecting the menu.php component. The vulnerability allows an attacker to perform actions as another user (e.g., changing usernames and passwords) via unspecified vectors. The available documents confirm the affecte...

5CVSS7AI score0.01024EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2006/06/28 10:0 p.m.20 views

CVE-2006-3273

Cross-site scripting XSS vulnerability in menu.php in Some Chess 1.5 rc1 allows remote attackers to inject arbitrary web script or HTML via the user parameter "New Name" field...

5.7AI score0.01269EPSS
Exploits0References6
exploitpack
exploitpack
added 2003/07/03 12:0 a.m.28 views

GNU Chess 5.0 - Local Buffer Overflow

GNU Chess 5.0 - Local Buffer Overflow // source: https://www.securityfocus.com/bid/8097/info A local buffer overflow has been reported for GNU Chess that may result in an attacker obtaining elevated privileges. The vulnerability exists due to insufficient boundary checks performed on some...

0.4AI score
Exploits0
NVD
NVD
added 2002/05/16 4:0 a.m.18 views

CVE-2002-0204

Buffer overflow in GNU Chess gnuchess 5.02 and earlier, if modified or used in a networked capacity contrary to its own design as a single-user application, may allow local or remote attackers to execute arbitrary code via a long command...

7.5CVSS7.7AI score0.03215EPSS
Exploits0References3
Cvelist
Cvelist
added 2002/05/03 4:0 a.m.28 views

CVE-2002-0204

Buffer overflow in GNU Chess gnuchess 5.02 and earlier, if modified or used in a networked capacity contrary to its own design as a single-user application, may allow local or remote attackers to execute arbitrary code via a long command...

7.7AI score0.03215EPSS
Exploits0References3
Cvelist
Cvelist
added 2000/01/18 5:0 a.m.17 views

CVE-1999-0847

Buffer overflow in free internet chess server FICS program, xboard...

6.9AI score0.01341EPSS
Exploits0References1
NVD
NVD
added 1999/11/29 5:0 a.m.10 views

CVE-1999-0847

Buffer overflow in free internet chess server FICS program, xboard...

5CVSS6.9AI score0.01341EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 1999/11/29 12:0 a.m.4 views

PT-1999-1400 · Free Internet Chess Server +1 · Fics +1

Name of the Vulnerable Software and Affected Versions: FICS affected versions not specified xboard affected versions not specified Description: The issue is related to a buffer overflow in the free internet chess server FICS program and xboard. Recommendations: At the moment, there is no...

5CVSS6.8AI score0.01341EPSS
Exploits0References2
Rows per page
Query Builder