CVE-2019-20896

WebChess 1.0 allows SQL injection via the messageFrom, gameID, opponent, messageID, or to parameter...

CVE-2019-20896: Improper Neutralization of Special Elements used in an SQL Command

WebChess 1.0 allows SQL injection via the messageFrom, gameID, opponent, messageID, or to parameter...

PT-2020-10859

Name of the Vulnerable Software and Affected Versions WebChess version 1.0 Description The issue allows SQL injection via the messageFrom, gameID, opponent, messageID, or to parameter. Recommendations For WebChess version 1.0, as a temporary workaround, consider restricting access to the paramete...